CVE-2017-12618

Apache Portable Runtime Utility APR-util 1.6.0 and prior fail to validate the integrity of SDBM database files used by aprsdbm functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and...

Out-of-bounds

Apache Portable Runtime Utility APR-util 1.6.0 and prior fail to validate the integrity of SDBM database files used by aprsdbm functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and...

CVE-2017-12618

Apache Portable Runtime Utility APR-util 1.6.0 and prior fail to validate the integrity of SDBM database files used by aprsdbm functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and...

CVE-2017-12618

Apache Portable Runtime Utility APR-util 1.6.0 and prior fail to validate the integrity of SDBM database files used by aprsdbm functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and...

CVE-2017-12618

CVE-2017-12618 affects APR-util (SDBM-backed databases used by apr_sdbm*()). The issue is a lack of integrity validation for SDBM files, enabling local attackers with write access to crash a program or cause denial of service. A patch/update for APR-util is available (see ALAS-2017-929 and Fedora...

PT-2017-12603

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime Utility APR-util versions 1.6.0 and prior Description The issue is related to the failure to validate the integrity of SDBM database files used by apr sdbm functions, which can result in a possible out of bound read...

CVE-2017-12618: Out-of-bounds Read

Apache Portable Runtime Utility APR-util 1.6.0 and prior fail to validate the integrity of SDBM database files used by aprsdbm functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and...

Oracle: Security Advisory (ELSA-2009-1107)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2009-1204)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2010-0950)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache Portable Runtime, APR Utility Library: Denial of service

Background The Apache Portable Runtime aka APR provides a set of APIs for creating platform-independent applications. The Apache Portable Runtime Utility Library aka APR-Util provides an interface to functionality such as XML parsing, string matching and database connections. Description Multiple...

Oracle Linux 5 / 6 : apr-util (ELSA-2010-0950)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0950 advisory. 1.3.9-3.1 - add security fix for CVE-2010-1623 659253 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 5 : apr-util (ELSA-2009-1107)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1107 advisory. 1.2.7-7.el53.1 - add security fixes for CVE-2009-0023, CVE-2009-1955, and CVE-2009-1956 504560 Tenable has extracted the preceding description block...

Slackware Advisory SSA:2011-041-01 apr-util

The remote host is missing an update as announced via advisory SSA:2011-041-01. OpenVAS Vulnerability Test $Id: esoftslkssa201104101.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2009-167-02 apr-util

The remote host is missing an update as announced via advisory SSA:2009-167-02. OpenVAS Vulnerability Test $Id: esoftslkssa200916702.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2009-219-03 apr-util

The remote host is missing an update as announced via advisory SSA:2009-219-03. OpenVAS Vulnerability Test $Id: esoftslkssa200921903.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2011-145-01 apr/apr-util

The remote host is missing an update as announced via advisory SSA:2011-145-01. OpenVAS Vulnerability Test $Id: esoftslkssa201114501.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2011-145-01 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Slackware Advisory SSA:2011-133-01 apr/apr-util

The remote host is missing an update as announced via advisory SSA:2011-133-01. OpenVAS Vulnerability Test $Id: esoftslkssa201113301.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2011-133-01 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Slackware: Security Advisory (SSA:2011-133-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2012-041-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...