Search for vulnerabilities
Vulnerability details: VCID-bay7-x8bk-dqf6
Vulnerability ID VCID-bay7-x8bk-dqf6
Aliases CVE-2009-1956
Summary An off-by-one overflow flaw was found in the way the bundled copy of the APR-util library processed a variable list of arguments. An attacker could provide a specially-crafted string as input for the formatted output conversion routine, which could, on big-endian platforms, potentially lead to the disclosure of sensitive information or a denial of service.
Status Published
Exploitability 0.5
Weighted Severity 4.8
Risk 2.4
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.05939 https://api.first.org/data/v1/epss?cve=CVE-2009-1956
epss 0.05939 https://api.first.org/data/v1/epss?cve=CVE-2009-1956
epss 0.05939 https://api.first.org/data/v1/epss?cve=CVE-2009-1956
epss 0.05939 https://api.first.org/data/v1/epss?cve=CVE-2009-1956
epss 0.05939 https://api.first.org/data/v1/epss?cve=CVE-2009-1956
epss 0.05939 https://api.first.org/data/v1/epss?cve=CVE-2009-1956
epss 0.05939 https://api.first.org/data/v1/epss?cve=CVE-2009-1956
epss 0.05939 https://api.first.org/data/v1/epss?cve=CVE-2009-1956
epss 0.05939 https://api.first.org/data/v1/epss?cve=CVE-2009-1956
epss 0.05939 https://api.first.org/data/v1/epss?cve=CVE-2009-1956
epss 0.05939 https://api.first.org/data/v1/epss?cve=CVE-2009-1956
epss 0.05939 https://api.first.org/data/v1/epss?cve=CVE-2009-1956
apache_httpd moderate https://httpd.apache.org/security/json/CVE-2009-1956.json
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1956.json
https://api.first.org/data/v1/epss?cve=CVE-2009-1956
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1956
504390 https://bugzilla.redhat.com/show_bug.cgi?id=504390
CVE-2009-1956 https://httpd.apache.org/security/json/CVE-2009-1956.json
RHSA-2009:1107 https://access.redhat.com/errata/RHSA-2009:1107
RHSA-2009:1108 https://access.redhat.com/errata/RHSA-2009:1108
USN-786-1 https://usn.ubuntu.com/786-1/
USN-787-1 https://usn.ubuntu.com/787-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.90271
EPSS Score 0.05939
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:28:49.888265+00:00 Apache HTTPD Importer Import https://httpd.apache.org/security/json/CVE-2009-1956.json 37.0.0