Количество 11
Количество 11
GHSA-v99m-xvmc-cgf3
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
CVE-2017-12613
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
CVE-2017-12613
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
CVE-2017-12613
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
CVE-2017-12613
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
CVE-2017-12613
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with ...
openSUSE-SU-2018:1214-1
Security update for libapr1
SUSE-SU-2018:1322-1
Security update for libapr1
SUSE-SU-2018:1196-1
Security update for libapr1
ELSA-2017-3270
ELSA-2017-3270: apr security update (IMPORTANT)
BDU:2022-05946
Уязвимость функций apr_time_exp*(), apr_os_exp_time*() библиотеки APR, позволяющая нарушителю получить доступ к конфиденциальным данным, а также вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-v99m-xvmc-cgf3 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | CVSS3: 7.1 | 2% Низкий | около 4 лет назад |
 | CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | CVSS3: 7.1 | 2% Низкий | почти 9 лет назад |
 | CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | CVSS3: 7.4 | 2% Низкий | почти 9 лет назад |
 | CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | CVSS3: 7.1 | 2% Низкий | почти 9 лет назад |
 | CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | CVSS3: 7.1 | 2% Низкий | 10 месяцев назад |
| CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with ... | CVSS3: 7.1 | 2% Низкий | почти 9 лет назад |
 | openSUSE-SU-2018:1214-1 Security update for libapr1 | 2% Низкий | около 8 лет назад | |
| SUSE-SU-2018:1322-1 Security update for libapr1 | 2% Низкий | около 8 лет назад | |
| SUSE-SU-2018:1196-1 Security update for libapr1 | 2% Низкий | около 8 лет назад | |
| ELSA-2017-3270 ELSA-2017-3270: apr security update (IMPORTANT) | больше 8 лет назад | ||
 | BDU:2022-05946 Уязвимость функций apr_time_exp*(), apr_os_exp_time*() библиотеки APR, позволяющая нарушителю получить доступ к конфиденциальным данным, а также вызвать отказ в обслуживании | CVSS3: 7.1 | 2% Низкий | почти 9 лет назад |
Уязвимостей на страницу