Количество 11
Количество 11
CVE-2017-12613
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
CVE-2017-12613
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
CVE-2017-12613
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
CVE-2017-12613
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
CVE-2017-12613
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with ...
openSUSE-SU-2018:1214-1
Security update for libapr1
SUSE-SU-2018:1322-1
Security update for libapr1
SUSE-SU-2018:1196-1
Security update for libapr1
GHSA-v99m-xvmc-cgf3
When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
ELSA-2017-3270
ELSA-2017-3270: apr security update (IMPORTANT)
BDU:2022-05946
Уязвимость функций apr_time_exp*(), apr_os_exp_time*() библиотеки APR, позволяющая нарушителю получить доступ к конфиденциальным данным, а также вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | CVSS3: 7.1 | 0% Низкий | около 8 лет назад | |
CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | CVSS3: 7.4 | 0% Низкий | около 8 лет назад | |
CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | CVSS3: 7.1 | 0% Низкий | около 8 лет назад | |
CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | CVSS3: 7.1 | 0% Низкий | около 1 месяца назад | |
CVE-2017-12613 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with ... | CVSS3: 7.1 | 0% Низкий | около 8 лет назад | |
openSUSE-SU-2018:1214-1 Security update for libapr1 | 0% Низкий | больше 7 лет назад | ||
SUSE-SU-2018:1322-1 Security update for libapr1 | 0% Низкий | больше 7 лет назад | ||
SUSE-SU-2018:1196-1 Security update for libapr1 | 0% Низкий | больше 7 лет назад | ||
GHSA-v99m-xvmc-cgf3 When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | CVSS3: 7.1 | 0% Низкий | больше 3 лет назад | |
ELSA-2017-3270 ELSA-2017-3270: apr security update (IMPORTANT) | почти 8 лет назад | |||
BDU:2022-05946 Уязвимость функций apr_time_exp*(), apr_os_exp_time*() библиотеки APR, позволяющая нарушителю получить доступ к конфиденциальным данным, а также вызвать отказ в обслуживании | CVSS3: 7.1 | 0% Низкий | около 8 лет назад |
Уязвимостей на страницу