FreeBSD : apr -- multiple vulnerabilities (eb9212f7-526b-11de-bbf2-001b77d09812)
High Nessus Plugin ID 39320
SynopsisThe remote FreeBSD host is missing one or more security-related updates.
DescriptionSecunia reports :
Some vulnerabilities have been reported in APR-util, which can be exploited by malicious users and malicious people to cause a DoS (Denial of Service).
A vulnerability is caused due to an error in the processing of XML files and can be exploited to exhaust all available memory via a specially crafted XML file containing a predefined entity inside an entity definition.
A vulnerability is caused due to an error within the 'apr_strmatch_precompile()' function in strmatch/apr_strmatch.c, which can be exploited to crash an application using the library.
RedHat reports :
A single NULL byte buffer overflow flaw was found in apr-util's apr_brigade_vprintf() function.
SolutionUpdate the affected packages.