Поиск уязвимостей
Количество 13
Количество 13
GHSA-v99m-xvmc-cgf3
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
CVE-2017-12613
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
CVE-2017-12613
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
CVE-2017-12613
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
CVE-2017-12613
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
CVE-2017-12613
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with ...
openSUSE-SU-2018:1214-1
Security update for libapr1
SUSE-SU-2018:1322-1
Security update for libapr1
SUSE-SU-2018:1196-1
Security update for libapr1
ELSA-2017-3270
ELSA-2017-3270: apr security update (IMPORTANT)
BDU:2022-05946
Уязвимость функций apr_time_exp*(), apr_os_exp_time*() библиотеки APR, позволяющая нарушителю получить доступ к конфиденциальным данным, а также вызвать отказ в обслуживании
ALT-PU-2019-2663
ALT-PU-2019-2663: package `apr1` update to version 1.7.0-alt1
SUSE-SU-2026:4927-1
Security update for libapr1, libtcnative-1-0, tomcat
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-v99m-xvmc-cgf3 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | CVSS3: 7.1 | 2% Низкий | больше 4 лет назад |
 | CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | CVSS3: 7.1 | 2% Низкий | около 9 лет назад |
 | CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | CVSS3: 7.4 | 2% Низкий | около 9 лет назад |
 | CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | CVSS3: 7.1 | 2% Низкий | около 9 лет назад |
 | CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | CVSS3: 7.1 | 2% Низкий | около 1 года назад |
| CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with ... | CVSS3: 7.1 | 2% Низкий | около 9 лет назад |
 | openSUSE-SU-2018:1214-1 Security update for libapr1 | 2% Низкий | больше 8 лет назад | |
| SUSE-SU-2018:1322-1 Security update for libapr1 | 2% Низкий | больше 8 лет назад | |
| SUSE-SU-2018:1196-1 Security update for libapr1 | 2% Низкий | больше 8 лет назад | |
| ELSA-2017-3270 ELSA-2017-3270: apr security update (IMPORTANT) | 2% Низкий | почти 9 лет назад | |
 | BDU:2022-05946 Уязвимость функций apr_time_exp*(), apr_os_exp_time*() библиотеки APR, позволяющая нарушителю получить доступ к конфиденциальным данным, а также вызвать отказ в обслуживании | CVSS3: 7.1 | 2% Низкий | около 9 лет назад |
| ALT-PU-2019-2663 ALT-PU-2019-2663: package `apr1` update to version 1.7.0-alt1 | CVSS3: 7.1 | 2% Низкий | около 7 лет назад |
| SUSE-SU-2026:4927-1 Security update for libapr1, libtcnative-1-0, tomcat | 12 дней назад |
Уязвимостей на страницу