Advisories » MGASA-2017-0417

Updated apr packages fix security vulnerability

Publication date: 19 Nov 2017
Modification date: 19 Nov 2017
Type: security
Affected Mageia releases : 5 , 6
CVE: CVE-2017-12613

Description

An out-of-bounds array dereference was found in apr_time_exp_get(). An
attacker could abuse an unvalidated usage of this function to cause a
denial of service or potentially lead to data leak (CVE-2017-12613).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=22017
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/GWFCC4MZWCXHD25BGQ26Z5VI7O6YH5WV/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12613

SRPMS

5/core

• apr-1.5.1-3.1.mga5

6/core

• apr-1.5.2-2.1.mga6