{"id":"CVE-2017-12618","details":"Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and cause a denial of service.","modified":"2026-04-16T06:15:21.096770663Z","published":"2017-10-24T01:29:02.030Z","related":["SUSE-SU-2017:3278-1","SUSE-SU-2018:0307-1","openSUSE-SU-2024:10629-1"],"references":[{"type":"WEB","url":"http://www.securitytracker.com/id/1042004"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2017/11/msg00006.html"},{"type":"ADVISORY","url":"http://mail-archives.apache.org/mod_mbox/apr-dev/201710.mbox/%3CCACsi252POs4toeJJciwg09_eu2cO3XFg%3DUqsPjXsfjDoeC3-UQ%40mail.gmail.com%3E"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/101558"}],"affected":[{"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12618.json","unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"0.9.1"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.2"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.3"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.4"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.5"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.6"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.7"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.9"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.10"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.11"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.12"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.13"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.14"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.15"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.16"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.17"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.18"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.19"}]},{"events":[{"introduced":"0"},{"last_affected":"0.9.20"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.2"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.2"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.2"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.6"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.7"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.8"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.9"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.10"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.12"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.13"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.2"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.3"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.4"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.6"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.7"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.8"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.9"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.10"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.11"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.12"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.13"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.2"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.3"}]},{"events":[{"introduced":"0"},{"last_affected":"1.5.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.5.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.5.2"}]},{"events":[{"introduced":"0"},{"last_affected":"1.5.3"}]},{"events":[{"introduced":"0"},{"last_affected":"1.5.4"}]},{"events":[{"introduced":"0"},{"last_affected":"1.5.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.6.0"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}