CVE:CVE-2009-1955
CNNVD:CNNVD-200906-102
Apache HTTP Server是美国阿帕奇软件（Apache Software）基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。
APR-util库所使用的expat XML解析器(位于xml/apr_xml.c文件的apr_xml_*接口)在处理实体定义中包含有大量嵌套实体引用的XML文件时可能会耗尽所有可用的内存，导致拒绝服务的情况。所有使用APR-util库的expat wrapper接口解析不可信任XML文档的网络服务都受这个漏洞影响，如Apache httpd WebDAV模块mod_dav。
solution:Upgrade apache apr-util to a higher version than 1.3.7,and avoid the version (,1.3.7); Upgrade apple mac_os_x to a higher version than 10.6.2,and avoid the version (,10.6.2); Upgrade suse linux_enterprise_server to a higher version than 9,and avoid the version 9; Upgrade debian debian_linux to a higher version than 4.0,and avoid the version 4.0; Upgrade canonical ubuntu_linux to a higher version than 6.06,8.04,8.10,9.04,and avoid the version 6.06,8.04,8.10,9.04; Upgrade fedoraproject fedora to a higher version than 9,10,11,and avoid the version 9,10,11; Upgrade oracle http_server to a higher version than -