SUSE SLES12 Security Update : libapr1 (SUSE-SU-2018:1196-1)

This update fixes the following issues : - CVE-2017-12613: DoS or information disclosure in prexptime or aprosexptime functions bsc1064982. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

Out-of-Bounds Read

libapr-1.so is vulnerable to out-of-bounds read. A malicious user can pass a invalid month value to the aprtimeexp or the aprosexptime functions to cause an out-of-bounds read that can lead to sensitive information being disclosed or the application crashing...

CVE-2017-12613: Out-of-bounds Read

When aprtimeexp or aprosexptime functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an aprtimeexpt value, potentially revealing the contents of a different static heap value or...