CVE-2009-3555: apache2 (exact versions not specified); +6 more affected products

CVE-2009-3555 affects apache2. EPSS 0.87264 (percentile 0.99754), scored 22-Oct-2026. Fixed version: 2.2.14-2. Fixed version: 2.2.14-2. Fixed version: 2.2.14-2. Fixed version: 1.4.30-1. Fixed version: 1.4.30-1. Fixed version: 1.4.30-1. Fixed version: 0.7.64-1. Fixed version: 0.7.64-1. Fixed version: 0.7.64-1. Fixed version: 3.12.6-1. Fixed version: 3.12.6-1. Fixed version: 3.12.6-1. Fixed version: 0.9.8k-6. Fixed version: 0.9.8k-6. Fixed version: 0.9.8k-6. Fixed version: 2.6-6.1. Fixed version: 2.6-6.1. Fixed version: 1.1.18-1. Fixed version: 1.1.18-1. Fixed version: 1.1.18-1.

Affected technology

apache2 · Exact affected versions not specified by the source
Vendor not specified by the source

lighttpd · Exact affected versions not specified by the source
Vendor not specified by the source

nginx · Exact affected versions not specified by the source
Vendor not specified by the source

nss · Exact affected versions not specified by the source
Vendor not specified by the source

openssl · Exact affected versions not specified by the source
Vendor not specified by the source

pound · Exact affected versions not specified by the source
Vendor not specified by the source

tomcat-native · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 23-Oct-2026 16:11 UTC

Product: apache2
CCR priority: 21.8 /100 (P4)
EPSS: 0.87264 · percentile 0.99754 · 2026-10-22
KEV: no

Provenance

OSV.dev · Source record · observed 2026-10-23 07:49:27.727257+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2009-3555.html