Summary
The remote host is missing an update to apr
announced via advisory FEDORA-2009-8336.
Solution
Apply the appropriate updates.
This update can be installed with the yum update program. Use su -c 'yum update apr' at the command line.
For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/.
https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2009-8336
Insight
The mission of the Apache Portable Runtime (APR) is to provide a free library of C data structures and routines, forming a system portability layer to as many operating systems as possible, including Unices, MS Win32, BeOS and OS/2.
Update Information:
CVE-2009-2412: allocator alignment fixes Full details here:
http://www.apache.org/dist/apr/patches/
ChangeLog:
* Thu Aug 6 2009 Bojan Smojver - 1.3.8-1
- bump up to 1.3.8
- CVE-2009-2412
- allocator alignment fixes
* Mon Jun 8 2009 Bojan Smojver - 1.3.5-1
- bump up to 1.3.5
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2009-2412 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities