CVE-2021-35940

Regression of CVE-2017-12613

published August 23, 2021

CVSS
—
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 and is vulnerable to the same issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01185 · 67.6th percentile
Published
2021-08-23T10:00Z
EPSS history
Timeline
  • 23 AUG 10:00Z
    Regression of CVE-2017-12613
    cvelistv5