BIT-apr-2021-35940

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/apr/BIT-apr-2021-35940.json
JSON Data
https://api.test.osv.dev/v1/vulns/BIT-apr-2021-35940
Aliases
Published
2024-03-06T10:50:57.087Z
Modified
2024-03-06T11:25:28.861Z
Summary
[none]
Details

An out-of-bounds array read in the aprtimeexp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 and is vulnerable to the same issue.

Database specific 
{
    "cpes": [
        "cpe:2.3:a:apache:portable_runtime:1.7.0:*:*:*:*:*:*:*"
    ],
    "severity": "High"
}
References

Affected packages

Bitnami / apr

Package

Name
apr
Purl
pkg:bitnami/apr

Severity

  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
1.7.0
Last affected
1.7.0