Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2009-3560

30
FAUCET Score

CVE-2009-3560 is a denial-of-service vulnerability in the big2_toUtf8 function of libexpat 2.0.1, specifically as used in the XML-Twig module for Perl. This flaw allows unauthenticated attackers to crash affected applications, such as Apache HTTP Server, by submitting XML documents containing malformed UTF-8 sequences that trigger a buffer over-read. Rated with a CVSS score of 5.0 (Medium), it has a low attack complexity and impacts availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
2.0.1CPE matchmatch criteria
cpe:2.3:a:libexpat_project:libexpat:2.0.1:*:*:*:*:*:*:*
>= 2.0.35, < 2.0.64CPE matchmatch criteria
cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
>= 2.2.0, < 2.2.17CPE matchmatch criteria
cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

5.0MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
24.31%
Probability of exploitation in next 30 days
EPSS Percentile
97.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.2431 is in the 98th percentile among its peer group of 23,701 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (7)

redhatpatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: expat-0:1.95.5-6.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: expat-0:1.95.7-4.el4_8.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: expat-0:1.95.8-8.3.el5_4.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 1.0
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: xmlrpc-c

Vendor Advisories (1)

redhatCVE-2009-3560Moderate

expat: buffer over-read and crash in big2_toUtf8() on XML with malformed UTF-8 sequences

Dec 2, 2009

References

expat.cvs.sourceforge.net / viewvc/expat/expat/lib/xmlparse.c
Permissions Required
expat.cvs.sourceforge.net / viewvc/expat/expat/lib/xmlparse.c
Broken Link
lists.opensuse.org / opensuse-security-announce/2010-01/msg00007.html
Third Party Advisory
lists.opensuse.org / opensuse-security-announce/2010-05/msg00001.html
Third Party AdvisoryVDB Entry
lists.opensuse.org / opensuse-security-announce/2010-05/msg00002.html
Third Party AdvisoryVDB Entry
lists.opensuse.org / opensuse-security-announce/2010-06/msg00001.html
Third Party AdvisoryVDB Entry
lists.opensuse.org / opensuse-security-announce/2010-08/msg00001.html
Third Party AdvisoryVDB Entry
lists.vmware.com / pipermail/security-announce/2010/000082.html
Broken Link
mail.python.org / pipermail/expat-bugs/2009-November/002846.html
Exploit
marc.info
Mailing ListThird Party Advisory
bugzilla.redhat.com / show_bug.cgi
Issue TrackingPatch
secunia.com / advisories/37537
Broken Link
secunia.com / advisories/38231
Broken Link
secunia.com / advisories/38794
Broken Link
secunia.com / advisories/38832
Broken Link
secunia.com / advisories/38834
Broken Link
secunia.com / advisories/39478
Broken Link
secunia.com / advisories/41701
Broken Link
secunia.com / advisories/43300
Broken Link
slackware.com / security/viewer.php
Mailing ListThird Party Advisory
lists.apache.org / thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E
lists.apache.org / thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10613
Broken Link
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12942
Broken Link
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6883
Broken Link
sunsolve.sun.com / search/document.do
Mailing ListThird Party Advisory
redhat.com / archives/fedora-package-announce/2009-December/msg00370.html
Mailing ListThird Party Advisory
redhat.com / archives/fedora-package-announce/2009-December/msg00394.html
Mailing ListThird Party Advisory
redhat.com / archives/fedora-package-announce/2009-December/msg00413.html
Mailing ListThird Party Advisory
debian.org / security/2009/dsa-1953
Third Party Advisory
mandriva.com / security/advisories
Broken Link
redhat.com / support/errata/RHSA-2011-0896.html
Broken Link
securityfocus.com / bid/37203
Third Party AdvisoryVDB Entry
securitytracker.com / id
Third Party AdvisoryVDB Entry
ubuntu.com / usn/USN-890-1
Third Party AdvisoryVDB Entry
ubuntu.com / usn/USN-890-6
Third Party Advisory
vupen.com / english/advisories/2010/0528
Broken Link
vupen.com / english/advisories/2010/0896
Broken Link
vupen.com / english/advisories/2010/1107
Broken Link
vupen.com / english/advisories/2011/0359
Broken Link