CVE-2022-24963

概要

参考情報

• lists.apache.org/thread/fw9p6sdncwsjkstwc066vz57xqzfksq9 · Mailing List
• security.netapp.com/advisory/ntap-20230908-0008

portable runtime のその他の脆弱性

• CVE-2023-49582中 5.5Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segm…
• CVE-2022-28331緊急 9.8On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a resu…
• CVE-2021-35940高 7.1An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fi…
• CVE-2017-12613高 7.1When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and …
• CVE-2012-0840中 5.0tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger…