High ELSA-2017-3270 1 CVE

Important: apr security update (Oracle Linux 7)

Published Nov 28, 2017 · Updated Nov 28, 2017

Ecosystem: Oracle Linux

Summary

[1.3.9-5.1]
- Resolves: #1507346 - CVE-2017-12613 apr: Out-of-bounds array deref
in apr_time_exp*() functions

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 7	apr	0:1.4.8-3.el7_4.1
Oracle Linux · 7	apr-devel	0:1.4.8-3.el7_4.1

Vulnerabilities 1

Unscored —

CVE-2017-12613

When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable R…

Apache Software Foundation Apache Portable Runtime apr apr Debian Ubuntu

Oct 24, 2017