Read the docs
TI-2023-27080 Aliases CVE-2023-49582GHSA-j26h-qjc9-68hh

Apache Portable Runtime (APR): Unexpected lax shared memory permissions

Priority LOW 25CWE-732Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APR_USE_SHMEM_SHMGET=1 (apr.h) Users are recommended to upgrade to APR version 1.7.5, which fixes this issue.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00332 26th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ApacheApache Portable Runtime (APR)0.9.0 – 1.7.4—No fix listedCNA
  • Apache Portable Runtime (APR) VendorApache Affected 0.9.0 – 1.7.4 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:apache:portable_runtime:*:*:*:*:*:*:*:*0.9.0 to before 1.7.5VulnerableApache
  • cpe:2.3:a:apache:portable_runtime:*:*:*:*:*:*:*:* Versions 0.9.0 to before 1.7.5 Vulnerable ·Apache

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 10AffectedNo fix yet
Not affected: 6 products
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat JBoss Core Services

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-49582
  2. 2026-10-03 Alias added: GHSA-j26h-qjc9-68hh

References

Advisory 1

  • TI-2009-02302 Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache… CVSS 2.0HIGH 10.0
  • TI-2022-11103 Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function CVSS 3.1CRITICAL 9.8
  • TI-2022-08761 Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions CVSS 3.1CRITICAL 9.8
  • TI-2012-00775 tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes… CVSS 2.0MEDIUM 5.0
  • TI-2009-02581 The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache… CVSS 3.1HIGH 7.5
  • TI-2011-00350 Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the… CVSS 2.0MEDIUM 4.3
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences