SB2017102724 - Fedora 25 update for apr
Published: October 27, 2017 Updated: April 24, 2025
Security Bulletin ID
SB2017102724
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Out-of-bounds read (CVE-ID: CVE-2017-12613)
The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.The weakness exists due to an out-of-bounds array dereference in the apr_time_exp_get() function. A remote attacker can access prior out-of-bounds memory, reveal the contents of a different static heap value and read arbitrary files or cause the application to crash.
Remediation
Install update from vendor's website.