Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2017-12613
Description:When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
Test IDs: 1.3.6.1.4.1.25623.1.1.2.2017.1303   1.3.6.1.4.1.25623.1.1.2.2019.1374   1.3.6.1.4.1.25623.1.0.882805   1.3.6.1.4.1.25623.1.1.2.2017.1304   1.3.6.1.4.1.25623.1.0.882807   1.3.6.1.4.1.25623.1.1.4.2018.1322.1   1.3.6.1.4.1.25623.1.0.873729   1.3.6.1.4.1.25623.1.1.4.2018.1196.1   1.3.6.1.4.1.25623.1.0.812316   1.3.6.1.4.1.25623.1.1.13.2023.032.01   1.3.6.1.4.1.25623.1.1.10.2017.0417   1.3.6.1.4.1.25623.1.1.2.2019.1452   1.3.6.1.4.1.25623.1.0.892897   1.3.6.1.4.1.25623.1.1.1.2.2017.1162  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-12613
BugTraq ID: 101560
http://www.securityfocus.com/bid/101560
https://lists.apache.org/thread.html/12489f2e4a9f9d390235c16298aca0d20658789de80d553513977f13%40%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/rb1f3c85f50fbd924a0051675118d1609e57957a02ece7facb723155b@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/rcc48a0acebbd74bbdeebc02ff228bb72c0631b21823fffe27d4691e9@%3Ccommits.apr.apache.org%3E
https://lists.apache.org/thread.html/r270dd5022db194b78acaf509216a33c85f3da43757defa05cc766339@%3Ccommits.apr.apache.org%3E
https://lists.apache.org/thread.html/ra2868b53339a6af65577146ad87016368c138388b09bff9d2860f50e@%3Cdev.apr.apache.org%3E
https://lists.apache.org/thread.html/ra38094406cc38a05218ebd1158187feda021b0c3a1df400bbf296af8@%3Cdev.apr.apache.org%3E
https://lists.debian.org/debian-lts-announce/2017/11/msg00005.html
https://lists.debian.org/debian-lts-announce/2022/01/msg00023.html
http://www.openwall.com/lists/oss-security/2021/08/23/1
RedHat Security Advisories: RHSA-2017:3270
https://access.redhat.com/errata/RHSA-2017:3270
RedHat Security Advisories: RHSA-2017:3475
https://access.redhat.com/errata/RHSA-2017:3475
RedHat Security Advisories: RHSA-2017:3476
https://access.redhat.com/errata/RHSA-2017:3476
RedHat Security Advisories: RHSA-2017:3477
https://access.redhat.com/errata/RHSA-2017:3477
RedHat Security Advisories: RHSA-2018:0316
https://access.redhat.com/errata/RHSA-2018:0316
RedHat Security Advisories: RHSA-2018:0465
https://access.redhat.com/errata/RHSA-2018:0465
RedHat Security Advisories: RHSA-2018:0466
https://access.redhat.com/errata/RHSA-2018:0466
RedHat Security Advisories: RHSA-2018:1253
https://access.redhat.com/errata/RHSA-2018:1253
http://www.securitytracker.com/id/1042004




© 1998-2025 E-Soft Inc. All rights reserved.