CVE-2009-0023: Buffer Overflow
A heap buffer underwrite flaw was found in apr-util's aprstrmatchprecompile() function.
This flaw could allow a remote attacker to overwrite arbitrary heap memory.
The upstream fix is here: http://svn.apache.org/viewvc?view=rev&revision=779880
Other sources
The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI directive in the moddavsvn module in the Apache HTTP Server, (3) the modapreq2 module for the Apache HTTP Server, or (4) an application that uses the libapreq2 library, which triggers a heap-based buffer underflow.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
apache APR-util apr_strmatch_precompile (strmatch/apr_strmatch.c)to a version that resolves this vulnerability.Fixed in 1.3.5 - Compensating control
Mitigate exposure by preventing remote attackers from reaching the code paths that call apr_strmatch_precompile(), such as requests involving .htaccess files, the SVNMasterURI directive in mod_dav_svn, the mod_apreq2 module, or applications using the libapreq2 library—until APR-util is upgraded to 1.3.5.
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0023?
CVE-2009-0023 is classified as a high severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2009-0023?
To fix CVE-2009-0023, upgrade to a version of apr-util that is later than 1.3.4 or applies the relevant upstream patch.
Which versions of apr-util are affected by CVE-2009-0023?
CVE-2009-0023 affects apr-util versions prior to 1.3.5 and specifically includes versions from 0.9.1 to 1.3.4.
What type of vulnerability is CVE-2009-0023?
CVE-2009-0023 is a heap buffer underwrite flaw that could allow arbitrary memory overwrites.
Can CVE-2009-0023 be exploited remotely?
Yes, CVE-2009-0023 can be exploited remotely, allowing attackers to potentially take control of the vulnerable system.