https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:27:40 +0000 https://cve.radiocsirt.org/vuln/certa-2011-avi-296 certa-2011-avi-296 https://cve.radiocsirt.org/vuln/certa-2011-avi-296 https://cve.radiocsirt.org/vuln/euvd-2026-113969 EUVD-2026-113969 https://cve.radiocsirt.org/vuln/euvd-2026-113969 https://cve.radiocsirt.org/vuln/fkie_cve-2011-0419 <p>Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.</p> <p>Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-0419 https://cve.radiocsirt.org/vuln/ghsa-hx32-x2cq-h45v <p>Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.</p> <p>Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.</p> https://cve.radiocsirt.org/vuln/ghsa-hx32-x2cq-h45v https://cve.radiocsirt.org/vuln/gsd-2011-0419 gsd-2011-0419 https://cve.radiocsirt.org/vuln/gsd-2011-0419 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10063-1 <p>libapr1-1.5.2-3.4 on GA media</p> <p>libapr1-1.5.2-3.4 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10063-1 https://cve.radiocsirt.org/vuln/rhsa-2011:0507 <p>apr: unconstrained recursion in apr_fnmatch</p> <p>apr: unconstrained recursion in apr_fnmatch</p> https://cve.radiocsirt.org/vuln/rhsa-2011:0507