CVE-2017-12618

State: Published
Severity: Not scored
Published: Oct 24, 2017
Updated: Aug 5, 2024
Reserved: Aug 7, 2017

Description

Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and cause a denial of service.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Apache Portable RuntimeApache Software Foundation	1.6.0 and priorAffected

References

[debian-lts-announce] 20171106 [SECURITY] [DLA 1163-1] apr-util security updatemailing-list
1042004vdb-entry
[announce] 20171023 Apache Portable Runtime APR 1.6.3, APR-util 1.6.1 and APR-iconv 1.2.2 Releasedmailing-list
101558vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.