Red Hat Security Advisory

RHSA-2018:0316

httpd24-apr security update

Released 2018-02-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) httpd24-apr-1.5.1-1.el6.1, httpd24-apr-devel-1.5.1-1.el6.1
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) httpd24-apr-1.5.1-1.el6.1, httpd24-apr-devel-1.5.1-1.el6.1
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) httpd24-apr-1.5.1-1.el6.1, httpd24-apr-devel-1.5.1-1.el6.1

Fixes 1 record

TI-2017-09338 CVE-2017-12613 · GHSA-v99m-xvmc-cgf3

Out-of-bounds read in Apache Portable Runtime

LOW 35

When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_t…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.01749 Published 2017-10-24 Partial fix CWE-125