https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:53:16 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-05946 bdu:2022-05946 https://cve.radiocsirt.org/vuln/bdu:2022-05946 https://cve.radiocsirt.org/vuln/bell-cve-2017-12613 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2017-12613 https://cve.radiocsirt.org/vuln/certfr-2018-avi-339 certfr-2018-avi-339 https://cve.radiocsirt.org/vuln/certfr-2018-avi-339 https://cve.radiocsirt.org/vuln/cnvd-2017-32840 cnvd-2017-32840 https://cve.radiocsirt.org/vuln/cnvd-2017-32840 https://cve.radiocsirt.org/vuln/euvd-2026-77220 EUVD-2026-77220 https://cve.radiocsirt.org/vuln/euvd-2026-77220 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12613 <p>When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.</p> <p>When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-12613 https://cve.radiocsirt.org/vuln/ghsa-v99m-xvmc-cgf3 <p>When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.</p> <p>When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.</p> https://cve.radiocsirt.org/vuln/ghsa-v99m-xvmc-cgf3 https://cve.radiocsirt.org/vuln/gsd-2017-12613 gsd-2017-12613 https://cve.radiocsirt.org/vuln/gsd-2017-12613 https://cve.radiocsirt.org/vuln/msrc_cve-2017-12613 msrc_CVE-2017-12613 https://cve.radiocsirt.org/vuln/msrc_cve-2017-12613 https://cve.radiocsirt.org/vuln/oesa-2021-1096 <p><strong>Affected:</strong> openEuler:20.03-LTS: apr, openEuler:20.03-LTS-SP1: apr</p> <p>The mission of the Apache Portable Runtime (APR) project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of predictable if not identical behaviour regardless of the platform on which their software is built, relieving them of the need to code special-case conditions to work around or take advantage of platform-specific deficiencies or features.</p> <p>Security Fix(es):</p> <p>An out-of-bounds array dereference was found in apr_time_exp_get(). An attacker could abuse an unvalidated usage of this function to cause a denial of service or potentially lead to data leak.(CVE-2017-12613)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS: apr, openEuler:20.03-LTS-SP1: apr</p> <p>The mission of the Apache Portable Runtime (APR) project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of predictable if not identical behaviour regardless of the platform on which their software is built, relieving them of the need to code special-case conditions to work around or take advantage of platform-specific deficiencies or features.</p> <p>Security Fix(es):</p> <p>An out-of-bounds array dereference was found in apr_time_exp_get(). An attacker could abuse an unvalidated usage of this function to cause a denial of service or potentially lead to data leak.(CVE-2017-12613)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1096 https://cve.radiocsirt.org/vuln/rhsa-2017:3270 <p>apr: Out-of-bounds array deref in apr_time_exp*() functions</p> <p>apr: Out-of-bounds array deref in apr_time_exp*() functions</p> https://cve.radiocsirt.org/vuln/rhsa-2017:3270 https://cve.radiocsirt.org/vuln/rhsa-2017:3475 <p>httpd: ap_get_basic_auth_pw() authentication bypass httpd: mod_ssl NULL pointer dereference httpd: mod_mime buffer overread httpd: Use-after-free by limiting unregistered HTTP method (Optionsbleed) apr: Out-of-bounds array deref in apr_time_exp*() functions</p> <p>httpd: ap_get_basic_auth_pw() authentication bypass httpd: mod_ssl NULL pointer dereference httpd: mod_mime buffer overread httpd: Use-after-free by limiting unregistered HTTP method (Optionsbleed) apr: Out-of-bounds array deref in apr_time_exp*() functions</p> https://cve.radiocsirt.org/vuln/rhsa-2017:3475 https://cve.radiocsirt.org/vuln/suse-su-2018:1196-1 <p>Security update for libapr1</p> <p>Security update for libapr1</p> https://cve.radiocsirt.org/vuln/suse-su-2018:1196-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12613 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: apr, Ubuntu:Pro:16.04:LTS: apr</p> <p>When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: apr, Ubuntu:Pro:16.04:LTS: apr</p> <p>When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12613 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1424 <p>Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1424