When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
07 Nov 2023, 02:38
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
18 Apr 2022, 18:16
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:* cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:jboss_core_services:-:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* cpe:2.3:a:redhat:jboss_enterprise_web_server:3.0.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:* |
|
First Time |
Debian debian Linux
Redhat enterprise Linux Desktop Redhat enterprise Linux Server Debian Redhat enterprise Linux Server Tus Redhat software Collections Redhat enterprise Linux Eus Redhat jboss Enterprise Web Server Redhat enterprise Linux Workstation Redhat enterprise Linux Server Aus Redhat jboss Core Services Redhat |
|
References | (MLIST) https://lists.apache.org/thread.html/rb1f3c85f50fbd924a0051675118d1609e57957a02ece7facb723155b@%3Cannounce.apache.org%3E - Mailing List, Vendor Advisory | |
References | (REDHAT) https://access.redhat.com/errata/RHSA-2017:3476 - Third Party Advisory | |
References | (BID) http://www.securityfocus.com/bid/101560 - Broken Link | |
References | (REDHAT) https://access.redhat.com/errata/RHSA-2017:3270 - Third Party Advisory | |
References | (MLIST) https://lists.debian.org/debian-lts-announce/2017/11/msg00005.html - Mailing List, Third Party Advisory | |
References | (REDHAT) https://access.redhat.com/errata/RHSA-2017:3477 - Third Party Advisory | |
References | (REDHAT) https://access.redhat.com/errata/RHSA-2018:0466 - Third Party Advisory | |
References | (MLIST) https://lists.apache.org/thread.html/ra2868b53339a6af65577146ad87016368c138388b09bff9d2860f50e@%3Cdev.apr.apache.org%3E - Mailing List, Vendor Advisory | |
References | (MLIST) https://lists.apache.org/thread.html/r270dd5022db194b78acaf509216a33c85f3da43757defa05cc766339@%3Ccommits.apr.apache.org%3E - Mailing List, Patch, Vendor Advisory | |
References | (MLIST) https://lists.apache.org/thread.html/rcc48a0acebbd74bbdeebc02ff228bb72c0631b21823fffe27d4691e9@%3Ccommits.apr.apache.org%3E - Mailing List, Patch, Vendor Advisory | |
References | (REDHAT) https://access.redhat.com/errata/RHSA-2018:0316 - Third Party Advisory | |
References | (CONFIRM) http://www.apache.org/dist/apr/Announcement1.x.html - Release Notes, Vendor Advisory | |
References | (SECTRACK) http://www.securitytracker.com/id/1042004 - Third Party Advisory, VDB Entry | |
References | (MLIST) https://lists.apache.org/thread.html/12489f2e4a9f9d390235c16298aca0d20658789de80d553513977f13%40%3Cannounce.apache.org%3E - Issue Tracking, Vendor Advisory | |
References | (MLIST) https://lists.apache.org/thread.html/ra38094406cc38a05218ebd1158187feda021b0c3a1df400bbf296af8@%3Cdev.apr.apache.org%3E - Mailing List, Vendor Advisory | |
References | (MLIST) https://lists.debian.org/debian-lts-announce/2022/01/msg00023.html - Mailing List, Third Party Advisory | |
References | (REDHAT) https://access.redhat.com/errata/RHSA-2017:3475 - Third Party Advisory | |
References | (REDHAT) https://access.redhat.com/errata/RHSA-2018:0465 - Third Party Advisory | |
References | (REDHAT) https://access.redhat.com/errata/RHSA-2018:1253 - Third Party Advisory | |
References | (MLIST) http://www.openwall.com/lists/oss-security/2021/08/23/1 - Mailing List, Third Party Advisory |
25 Jan 2022, 02:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
16 Sep 2021, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
23 Aug 2021, 14:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
23 Aug 2021, 12:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
20 Aug 2021, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2017-10-24 01:29
Updated : 2023-12-10 12:15
NVD link : CVE-2017-12613
Mitre link : CVE-2017-12613
CVE.ORG link : CVE-2017-12613
JSON object : View
Products Affected
redhat
- jboss_enterprise_web_server
- enterprise_linux_workstation
- enterprise_linux_server_tus
- jboss_core_services
- enterprise_linux_server
- enterprise_linux_server_aus
- enterprise_linux_desktop
- enterprise_linux_eus
- software_collections
debian
- debian_linux
apache
- portable_runtime
CWE
CWE-125
Out-of-bounds Read