CVE-2017-12613

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-12613
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12613.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-12613
Downstream
BELL (1)
DEBIAN (1)
MGASA (1)
OESA (2)
RHSA (6)
SUSE (3)
UBUNTU (1)
Related
SUSE (3)
Published
2017-10-24T01:29:02Z
Modified
2026-10-31T18:11:54Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
Summary
[none]
Details

When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "7.0"
                        },
                        {
                            "last_affected":  "7.0"
                        },
                        {
                            "introduced":  "9.0"
                        },
                        {
                            "last_affected":  "9.0"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "debian:debian_linux"
        },
        {
            "cpes":  [
                "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "6.0"
                        },
                        {
                            "last_affected":  "6.0"
                        },
                        {
                            "introduced":  "7.0"
                        },
                        {
                            "last_affected":  "7.0"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "redhat:enterprise_linux_desktop"
        },
        {
            "cpes":  [
                "cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "6.7"
                        },
                        {
                            "last_affected":  "6.7"
                        },
                        {
                            "introduced":  "7.3"
                        },
                        {
                            "last_affected":  "7.3"
                        },
                        {
                            "introduced":  "7.4"
                        },
                        {
                            "last_affected":  "7.4"
                        },
                        {
                            "introduced":  "7.5"
                        },
                        {
                            "last_affected":  "7.5"
                        },
                        {
                            "introduced":  "7.6"
                        },
                        {
                            "last_affected":  "7.6"
                        },
                        {
                            "introduced":  "7.7"
                        },
                        {
                            "last_affected":  "7.7"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "redhat:enterprise_linux_eus"
        },
        {
            "cpes":  [
                "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "6.0"
                        },
                        {
                            "last_affected":  "6.0"
                        },
                        {
                            "introduced":  "7.0"
                        },
                        {
                            "last_affected":  "7.0"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "redhat:enterprise_linux_server"
        },
        {
            "cpes":  [
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "6.4"
                        },
                        {
                            "last_affected":  "6.4"
                        },
                        {
                            "introduced":  "6.5"
                        },
                        {
                            "last_affected":  "6.5"
                        },
                        {
                            "introduced":  "6.6"
                        },
                        {
                            "last_affected":  "6.6"
                        },
                        {
                            "introduced":  "7.2"
                        },
                        {
                            "last_affected":  "7.2"
                        },
                        {
                            "introduced":  "7.3"
                        },
                        {
                            "last_affected":  "7.3"
                        },
                        {
                            "introduced":  "7.4"
                        },
                        {
                            "last_affected":  "7.4"
                        },
                        {
                            "introduced":  "7.6"
                        },
                        {
                            "last_affected":  "7.6"
                        },
                        {
                            "introduced":  "7.7"
                        },
                        {
                            "last_affected":  "7.7"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "redhat:enterprise_linux_server_aus"
        },
        {
            "cpes":  [
                "cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "6.6"
                        },
                        {
                            "last_affected":  "6.6"
                        },
                        {
                            "introduced":  "7.2"
                        },
                        {
                            "last_affected":  "7.2"
                        },
                        {
                            "introduced":  "7.3"
                        },
                        {
                            "last_affected":  "7.3"
                        },
                        {
                            "introduced":  "7.4"
                        },
                        {
                            "last_affected":  "7.4"
                        },
                        {
                            "introduced":  "7.6"
                        },
                        {
                            "last_affected":  "7.6"
                        },
                        {
                            "introduced":  "7.7"
                        },
                        {
                            "last_affected":  "7.7"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "redhat:enterprise_linux_server_tus"
        },
        {
            "cpes":  [
                "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "6.0"
                        },
                        {
                            "last_affected":  "6.0"
                        },
                        {
                            "introduced":  "7.0"
                        },
                        {
                            "last_affected":  "7.0"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "redhat:enterprise_linux_workstation"
        },
        {
            "cpes":  [
                "cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "1.0"
                        },
                        {
                            "last_affected":  "1.0"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "redhat:jboss_core_services"
        },
        {
            "cpes":  [
                "cpe:2.3:a:redhat:jboss_enterprise_web_server:3.0.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "3.0.0"
                        },
                        {
                            "last_affected":  "3.0.0"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "redhat:jboss_enterprise_web_server"
        },
        {
            "cpes":  [
                "cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "1.0"
                        },
                        {
                            "last_affected":  "1.0"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "redhat:software_collections"
        }
    ]
}
References

Affected packages

Git / github.com/apache/apr

Affected ranges

Type
GIT
Repo
https://github.com/apache/apr
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
74084e43adbf6b9df152a8b5d051b8180ebc1a69
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:apache:portable_runtime:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "1.7.0"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12613.json"