Skip to content
Sign in
Not rated

CVE-2017-12618 Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by…

Description

Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and cause a denial of service.

Affected products and versions

Product Affected versions Fixed in
Apache Portable Runtime Versions not published

Other CVEs of Apache Portable Runtime

The 2 CVEs of Apache Portable Runtime →
CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable… Not rated
Track this CVE