CVE-2023-49582

概要

参考情報

• lists.apache.org/thread/sntjc04t1rvjhdzz2tzmtz2zdnmv7dc4 · Mailing List
• openwall.com/lists/oss-security/2024/08/26/1
• security.netapp.com/advisory/ntap-20241101-0004

portable runtime のその他の脆弱性

• CVE-2022-28331緊急 9.8On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a resu…
• CVE-2022-24963緊急 9.8Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bou…
• CVE-2021-35940高 7.1An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fi…
• CVE-2017-12613高 7.1When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and …
• CVE-2012-0840中 5.0tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger…