{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-20T21:06:42.079","vulnerabilities":[{"cve":{"id":"CVE-2017-12618","sourceIdentifier":"security@apache.org","published":"2017-10-24T01:29:02.030","lastModified":"2025-04-20T01:37:25.860","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and cause a denial of service."},{"lang":"es","value":"Apache Portable Runtime Utility (APR-util) en versiones 1.6.0 y anteriores falla a la hora de validar la integridad de los archivos de la base de datos SDBM utilizados por la función apr_sdbm*(), resultando en un posible acceso de lectura fuera de límites. Un usuario local con acceso de escritura en la base de datos puede hacer que un programa o proceso que utilicen estas funciones se cierren de manera inesperada y provocque una denegación de servicio (DoS)."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6999D3C8-5137-4421-9D56-F5D928349F7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"19A141AE-0294-4C29-B296-789E8DCE5A69"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"502E78DE-6DE1-496C-B56F-3C133188D668"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"2513B46B-C33F-40F9-9E1E-59841FBD02BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"B03590FE-F169-4081-9D69-100A78C5D24E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"798AEC88-A045-420B-A33D-A7D6F9994F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"C17B6205-04E3-4851-A21B-E21323F01BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"77F3A5AD-26C2-4D00-9CB8-49D594DE9266"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"909AAAEE-36C3-491C-921A-31942F0971D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"99EE5091-4EA0-4F7B-B429-C1A4A7072C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"049C5194-3DA8-4E8F-905F-0CC841FC59FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"E8C64010-7206-49D9-AEB4-5D28130B04FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"23B7DF6D-5DB4-4944-8E89-C0CC891AF62B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"2DA33281-303F-4583-9F4F-498E9018B3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"91E7546E-780A-41B2-B4F4-A54D25898A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.17:*:*:*:*:*:*:*","matchCriteriaId":"CE5DD3B2-335B-4C44-8D42-D59161C69518"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.18:*:*:*:*:*:*:*","matchCriteriaId":"FBC85F3C-C7E0-4095-9195-4B7E9A37A073"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.19:*:*:*:*:*:*:*","matchCriteriaId":"DC095A23-B074-43AD-B521-7B4DDCADA7B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:0.9.20:*:*:*:*:*:*:*","matchCriteriaId":"22BF5033-A025-43CB-BA6F-EFC75872CF5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"994D3DD2-32C7-4895-A0C6-F226C075E157"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9982D865-1DAF-43D0-AABD-B63DF110365A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3657917A-EC7E-479D-A9AF-9144CA52FA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E56077C-EB5A-4D20-8E99-848D67DDB08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"224AB48D-4A8A-4906-AEEC-0BBC95E15A9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F4CE5EE3-3FB1-4865-832E-25FADA08BBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A4018BC8-50E9-4484-9BA0-3D17D1DA2390"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"02252670-6741-4152-87DA-AACA8EB25C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"5AEBC8CE-7539-4C55-B746-B5CD77E1A90C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"F37DAF48-76E4-4821-98B0-1F88AD89D6CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"988C50F7-18C7-4AF8-8320-6C88984B8D4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"850B8AF7-8453-4B9B-89E4-676CF906C0AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"31A68887-E0CB-4391-AFFF-A6BAF60818BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"5C390948-577A-4AD3-8FF2-63BE9B2C99FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"5C5B4182-54D7-4142-A89B-2925FE46451F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3CDE5E59-018B-49E3-AB91-1E5591DD0C52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"EF0A02D3-003F-4D01-B603-52CC616C51A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F2323E7B-5244-4BAD-AC0C-12FFD4E00A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"8411ABE9-E69B-4AFF-B83D-BEA179CDA5F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"1F294E3A-CEA3-4F4A-9C66-CEA01C68A308"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"75BE72E7-4BF7-4D79-BD15-39167A58B20E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"660373C8-6312-427E-863F-86A9AD4E851D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"12548A72-7EC3-4C09-B084-D5969DCE01F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"3F567995-C953-45E5-93C6-21F5C1B05E80"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"120FB645-84B8-4F2C-8AA1-94E1E7191486"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"68DAF92B-714B-4802-98A5-159634BF603A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"5CAE9FC8-A998-4C63-A9C1-ED6325FA4C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"8B066694-6BBD-4B14-A75A-ECAAC4535CBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.3.13:*:*:*:*:*:*:*","matchCriteriaId":"82343260-40A9-4827-9898-A30B59DA6B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2CF1CC96-3E96-457E-884C-0E1B20BCB69A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B22FDB88-2929-42FB-926C-F020DED5CEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"39F2572E-D753-4102-8402-E11288FADC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"E395A237-55FE-48AD-BB57-A768D5D18494"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"BE7A6A57-BEE0-43A1-B3DB-C969FB1CF748"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B7626B58-0014-4989-AC3B-A529002100AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"89F5EAE7-D9F4-4A9F-BBE5-B538FB6AA5CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"51D0B846-13BE-4558-9F79-473E33892A8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C3EA9B77-196C-40E2-8126-63DB1EA31677"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"3EBED8CC-19EB-4942-B898-4A6BC7B9BEB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:portable_runtime_utility:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"70A778C8-567A-4AF6-9087-40E3FC80E3F4"}]}]}],"references":[{"url":"http://mail-archives.apache.org/mod_mbox/apr-dev/201710.mbox/%3CCACsi252POs4toeJJciwg09_eu2cO3XFg%3DUqsPjXsfjDoeC3-UQ%40mail.gmail.com%3E","source":"security@apache.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/101558","source":"security@apache.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1042004","source":"security@apache.org"},{"url":"https://lists.debian.org/debian-lts-announce/2017/11/msg00006.html","source":"security@apache.org"},{"url":"http://mail-archives.apache.org/mod_mbox/apr-dev/201710.mbox/%3CCACsi252POs4toeJJciwg09_eu2cO3XFg%3DUqsPjXsfjDoeC3-UQ%40mail.gmail.com%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/101558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1042004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2017/11/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}