| Package | Affected versions | Patched versions |
|---|---|---|
| apr-util | ≤ 1.3.4 | |
| http server | ≥ 2.2.0, < 2.2.12 | 2.2.12 |
Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free