CVE-2021-35940: Regression of CVE-2017-12613
An out-of-bounds array read in the aprtimeexp() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 and is vulnerable to the same issue.
Other sources
Apache Portable Runtime could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds array read in the aprtimeexp() functions. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information, or cause a denial of service condition.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-35940?
CVE-2021-35940 is an out-of-bounds array read vulnerability in the apr_time_exp*() functions of the Apache Portable Runtime.
What is the severity of CVE-2021-35940?
CVE-2021-35940 has a severity of 7.1 (high).
Which software versions are affected by CVE-2021-35940?
Versions 1.7.0 of Apache Portable Runtime and 12.2.1.3.0 and 12.2.1.4.0 of Oracle HTTP Server are affected by CVE-2021-35940.
How was CVE-2021-35940 fixed?
The out-of-bounds array read vulnerability in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release.
Are Apache Portable Runtime versions after 1.6.3 vulnerable to CVE-2021-35940?
Yes, version 1.7.0 of Apache Portable Runtime regressed and is vulnerable to the same out-of-bounds array read issue as version 1.6.3.