PT-2024-13755

🗓️ 12 Aug 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Apache Portable Runtime on Unix had lax shared memory permissions exposing data; upgrade to 1.7.5.

Reporter	Title	Published	Views	Family All 386
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM Rational ClearQuest (CVE-2017-12613)	17 Jun 201805:27	–	ibm
IBM Security Bulletins	Security Bulletin: Information disclosure in IBM HTTP Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2017-12613)	15 Jun 201807:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in IBM HTTP Server affects Netezza Performance Portal	18 Oct 201903:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM HTTP Server affect WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On	9 Mar 202302:58	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Portable Runtime affects PowerKVM	18 Jun 201801:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager Appliance is affected by a vulnerability in the Apache Portal Runtime (CVE-2017-12613)	16 Jun 201822:06	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2017-12613)	10 Jul 201808:34	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway (CVE-2017-12613)	16 Jun 201822:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libapr1 affects IBM BladeCenter Advanced Management Module (AMM)	11 Oct 201815:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to multiple vulnerabilities due to the included Apache HTTP Server and Apache Portable Runtime	28 Feb 202301:58	–	ibm

Source	Link
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-apr-cve-2023-49582
docs	www.docs.bell-sw.com/security/cves/CVE-2023-49582
lists	www.lists.suse.com/mailman/listinfo/sle-security-updates
twitter	www.twitter.com/transilienceai/status/1829585097382609350
lists	www.lists.apache.org/thread/h5f1c2dqm8bf5yfosw3rg85927p612l0
suse	www.suse.com/security/cve/CVE-2023-49582
suse	www.suse.com/security/cve/CVE-2023-49582.html
lists	www.lists.apache.org/thread/sntjc04t1rvjhdzz2tzmtz2zdnmv7dc4
openwall	www.openwall.com/lists/oss-security/2024/08/26/1
github	www.github.com/apache/apr/commit/501072062dfcbc459f5d1e576113d17c7de84d5a

10 Dec 2025 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.15.5 - 9.8

CVSS 23.6

EPSS0.00303

SSVC