Non notée

CVE-2017-12618 Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by…

Description

Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and cause a denial of service.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Apache Portable Runtime	Versions non publiées

Références

[debian-lts-announce] 20171106 [SECURITY] [DLA 1163-1] apr-util security update lists.debian.org
1042004 www.securitytracker.com
[announce] 20171023 Apache Portable Runtime APR 1.6.3, APR-util 1.6.1 and APR-iconv 1.2.2 Released mail-archives.apache.org
101558 www.securityfocus.com

Chronologie

Publiée 24 octobre 2017
Dernière modification 5 août 2024

Les 2 CVE de Apache Portable Runtime →

CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable… Non notée

Suivre cette CVE

CVE-2017-12618 Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by…

Description

Produits et versions touchés

Références

Chronologie

Autres CVE de Apache Portable Runtime