[SECURITY] [DLA 1163-1] apr-util security update

2017-11-0621:39:07

lists.debian.org

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON

Package : apr-util
Version : 1.4.1-3+deb7u1
CVE ID : CVE-2017-12618
Debian Bug : #879996

It was discovered that there was an out-of-bounds read access in
apr-util, a support/portability library used by many applications.

A local user with write access to the database could have made a process
using these functions crash and thus cause a denial-of-service.

For Debian 7 "Wheezy", this issue has been fixed in apr-util version
1.4.1-3+deb7u1.

We recommend that you upgrade your apr-util packages.

Regards,

  ,&#x27;&#x27;`.
 : :&#x27;  :     Chris Lamb
 `. `&#x27;`      [email protected] / chris-lamb.co.uk
   `-

OSVersionArchitecturePackageVersionFilename
Debian7allapr-util< 1.4.1-3+deb7u1apr-util_1.4.1-3+deb7u1_all.deb
Debian7i386libaprutil1-dbd-odbc< 1.4.1-3+deb7u1libaprutil1-dbd-odbc_1.4.1-3+deb7u1_i386.deb
Debian7i386libaprutil1-ldap< 1.4.1-3+deb7u1libaprutil1-ldap_1.4.1-3+deb7u1_i386.deb
Debian7armhflibaprutil1-dev< 1.4.1-3+deb7u1libaprutil1-dev_1.4.1-3+deb7u1_armhf.deb
Debian7armhflibaprutil1-ldap< 1.4.1-3+deb7u1libaprutil1-ldap_1.4.1-3+deb7u1_armhf.deb
Debian7i386libaprutil1-dbg< 1.4.1-3+deb7u1libaprutil1-dbg_1.4.1-3+deb7u1_i386.deb
Debian7amd64libaprutil1-dbd-odbc< 1.4.1-3+deb7u1libaprutil1-dbd-odbc_1.4.1-3+deb7u1_amd64.deb
Debian7armellibaprutil1-dbg< 1.4.1-3+deb7u1libaprutil1-dbg_1.4.1-3+deb7u1_armel.deb
Debian7armhflibaprutil1< 1.4.1-3+deb7u1libaprutil1_1.4.1-3+deb7u1_armhf.deb
Debian7i386libaprutil1< 1.4.1-3+deb7u1libaprutil1_1.4.1-3+deb7u1_i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	all	apr-util	< 1.4.1-3+deb7u1	apr-util_1.4.1-3+deb7u1_all.deb
Debian	7	i386	libaprutil1-dbd-odbc	< 1.4.1-3+deb7u1	libaprutil1-dbd-odbc_1.4.1-3+deb7u1_i386.deb
Debian	7	i386	libaprutil1-ldap	< 1.4.1-3+deb7u1	libaprutil1-ldap_1.4.1-3+deb7u1_i386.deb
Debian	7	armhf	libaprutil1-dev	< 1.4.1-3+deb7u1	libaprutil1-dev_1.4.1-3+deb7u1_armhf.deb
Debian	7	armhf	libaprutil1-ldap	< 1.4.1-3+deb7u1	libaprutil1-ldap_1.4.1-3+deb7u1_armhf.deb
Debian	7	i386	libaprutil1-dbg	< 1.4.1-3+deb7u1	libaprutil1-dbg_1.4.1-3+deb7u1_i386.deb
Debian	7	amd64	libaprutil1-dbd-odbc	< 1.4.1-3+deb7u1	libaprutil1-dbd-odbc_1.4.1-3+deb7u1_amd64.deb
Debian	7	armel	libaprutil1-dbg	< 1.4.1-3+deb7u1	libaprutil1-dbg_1.4.1-3+deb7u1_armel.deb
Debian	7	armhf	libaprutil1	< 1.4.1-3+deb7u1	libaprutil1_1.4.1-3+deb7u1_armhf.deb
Debian	7	i386	libaprutil1	< 1.4.1-3+deb7u1	libaprutil1_1.4.1-3+deb7u1_i386.deb