Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and cause a denial of service.
The product reads data past the end, or before the beginning, of the intended buffer.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Portable_runtime_utility | Apache | 0.9.20 | 0.9.20 |
Portable_runtime_utility | Apache | 0.9.19 | 0.9.19 |
Portable_runtime_utility | Apache | 0.9.18 | 0.9.18 |
Portable_runtime_utility | Apache | 0.9.17 | 0.9.17 |
Portable_runtime_utility | Apache | 0.9.16 | 0.9.16 |
Portable_runtime_utility | Apache | 0.9.15 | 0.9.15 |
Portable_runtime_utility | Apache | 0.9.14 | 0.9.14 |
Portable_runtime_utility | Apache | 0.9.13 | 0.9.13 |
Portable_runtime_utility | Apache | 0.9.12 | 0.9.12 |
Portable_runtime_utility | Apache | 0.9.11 | 0.9.11 |
Portable_runtime_utility | Apache | 0.9.10 | 0.9.10 |
Portable_runtime_utility | Apache | 0.9.9 | 0.9.9 |
Portable_runtime_utility | Apache | 0.9.7 | 0.9.7 |
Portable_runtime_utility | Apache | 0.9.6 | 0.9.6 |
Portable_runtime_utility | Apache | 0.9.5 | 0.9.5 |
Portable_runtime_utility | Apache | 0.9.4 | 0.9.4 |
Portable_runtime_utility | Apache | 0.9.3 | 0.9.3 |
Portable_runtime_utility | Apache | 0.9.2 | 0.9.2 |
Portable_runtime_utility | Apache | 0.9.1 | 0.9.1 |
Portable_runtime_utility | Apache | 1.1.2 | 1.1.2 |
Portable_runtime_utility | Apache | 1.1.1 | 1.1.1 |
Portable_runtime_utility | Apache | 1.1.0 | 1.1.0 |
Portable_runtime_utility | Apache | 1.2.13 | 1.2.13 |
Portable_runtime_utility | Apache | 1.2.12 | 1.2.12 |
Portable_runtime_utility | Apache | 1.2.10 | 1.2.10 |
Portable_runtime_utility | Apache | 1.2.9 | 1.2.9 |
Portable_runtime_utility | Apache | 1.2.8 | 1.2.8 |
Portable_runtime_utility | Apache | 1.2.7 | 1.2.7 |
Portable_runtime_utility | Apache | 1.2.6 | 1.2.6 |
Portable_runtime_utility | Apache | 1.2.2 | 1.2.2 |
Portable_runtime_utility | Apache | 1.2.1 | 1.2.1 |
Portable_runtime_utility | Apache | 1.3.13 | 1.3.13 |
Portable_runtime_utility | Apache | 1.3.12 | 1.3.12 |
Portable_runtime_utility | Apache | 1.3.11 | 1.3.11 |
Portable_runtime_utility | Apache | 1.3.10 | 1.3.10 |
Portable_runtime_utility | Apache | 1.3.9 | 1.3.9 |
Portable_runtime_utility | Apache | 1.3.8 | 1.3.8 |
Portable_runtime_utility | Apache | 1.3.7 | 1.3.7 |
Portable_runtime_utility | Apache | 1.3.6 | 1.3.6 |
Portable_runtime_utility | Apache | 1.3.5 | 1.3.5 |
Portable_runtime_utility | Apache | 1.3.4 | 1.3.4 |
Portable_runtime_utility | Apache | 1.3.3 | 1.3.3 |
Portable_runtime_utility | Apache | 1.3.2 | 1.3.2 |
Portable_runtime_utility | Apache | 1.3.1 | 1.3.1 |
Portable_runtime_utility | Apache | 1.3.0 | 1.3.0 |
Portable_runtime_utility | Apache | 1.4.3 | 1.4.3 |
Portable_runtime_utility | Apache | 1.4.2 | 1.4.2 |
Portable_runtime_utility | Apache | 1.4.1 | 1.4.1 |
Portable_runtime_utility | Apache | 1.4.0 | 1.4.0 |
Portable_runtime_utility | Apache | 1.5.5 | 1.5.5 |
Portable_runtime_utility | Apache | 1.5.4 | 1.5.4 |
Portable_runtime_utility | Apache | 1.5.3 | 1.5.3 |
Portable_runtime_utility | Apache | 1.5.2 | 1.5.2 |
Portable_runtime_utility | Apache | 1.5.1 | 1.5.1 |
Portable_runtime_utility | Apache | 1.5.0 | 1.5.0 |
Portable_runtime_utility | Apache | 1.6.0 | 1.6.0 |
Portable_runtime_utility | Apache | 1.0.2 | 1.0.2 |
Portable_runtime_utility | Apache | 1.0.1 | 1.0.1 |
Portable_runtime_utility | Apache | 1.0.0 | 1.0.0 |