Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:3278-1

Опубликовано: 13 дек. 2017
Источник: suse-cvrf

Описание

Security update for libapr-util1

This update for libapr-util1 fixes the following issues:

Security issue fixed:

  • CVE-2017-12618: DoS via crafted SDBM database files in apr_sdbm*() functions (bsc#1064990)

Список пакетов

SUSE Linux Enterprise Server 12 SP2
libapr-util1-1.5.3-2.3.1
libapr-util1-dbd-sqlite3-1.5.3-2.3.1
SUSE Linux Enterprise Server 12 SP3
libapr-util1-1.5.3-2.3.1
libapr-util1-dbd-sqlite3-1.5.3-2.3.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
libapr-util1-1.5.3-2.3.1
libapr-util1-dbd-sqlite3-1.5.3-2.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libapr-util1-1.5.3-2.3.1
libapr-util1-dbd-sqlite3-1.5.3-2.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libapr-util1-1.5.3-2.3.1
libapr-util1-dbd-sqlite3-1.5.3-2.3.1
SUSE Linux Enterprise Software Development Kit 12 SP2
libapr-util1-1.5.3-2.3.1
libapr-util1-devel-1.5.3-2.3.1
SUSE Linux Enterprise Software Development Kit 12 SP3
libapr-util1-1.5.3-2.3.1
libapr-util1-devel-1.5.3-2.3.1

Ссылки

Описание

Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and cause a denial of service.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP2:libapr-util1-1.5.3-2.3.1
SUSE Linux Enterprise Server 12 SP2:libapr-util1-dbd-sqlite3-1.5.3-2.3.1
SUSE Linux Enterprise Server 12 SP3:libapr-util1-1.5.3-2.3.1
SUSE Linux Enterprise Server 12 SP3:libapr-util1-dbd-sqlite3-1.5.3-2.3.1
Ссылки