CVE-2003-0245

Description

Vulnerability in the apr_psprintf function in the Apache Portable Runtime (APR) library for Apache 2.0.37 through 2.0.45 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long strings, as demonstrated using XML objects to mod_dav, and possibly other vectors.

How to fix CVE-2003-0245

To remediate CVE-2003-0245, upgrade the affected package to a fixed version below.

• Debian/apache2—upgrade to 2.0.46 or later

Is CVE-2003-0245 being exploited?

Likely — EPSS is 84.1%, placing CVE-2003-0245 in the top tier of vulnerabilities by exploitation probability. Prioritise patching.

Affected packages (1)

• from 0, < 2.0.46

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2003-0245