CVE-2017-12613

24

FAUCET Score

CVE-2017-12613 is a high-severity vulnerability affecting Apache Portable Runtime (APR) versions 1.6.2 and prior, as well as products like Apache, Debian, and Red Hat. It allows out-of-bounds memory access when invalid month values are processed by apr_time_exp*() or apr_os_exp_time*() functions. This can lead to information disclosure or denial of service due to program termination or revealing static heap contents. While rated high with a CVSS score of 7.1, there is no known active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this vulnerability.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 1.7.0CPE matchmatch criteria	cpe:2.3:a:apache:portable_runtime::::::::
		7.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:7.0:::::::*
		9.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:9.0:::::::*
		Range not provided by sourceCPE matchmatch criteria	cpe:2.3:a:redhat:jboss_core_services:-:::::::*
		1.0CPE matchmatch criteria	cpe:2.3:a:redhat:jboss_core_services:1.0:::::::*

CVSS Data

CVSS version used by this source: 3.1

7.1HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

5.2

CvssVersion

3.1

Exploit Intelligence

EPSS Score

1.75%

Probability of exploitation in next 30 days

EPSS Percentile

75.5%

Percentile rank of EPSS score among Peer Group

As of 2026-07-25

Model: v2026.06.15

This CVE's current EPSS score of 0.0175 is in the 96th percentile among its peer group of 16,994 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (36)

microsoftpatch availablevia msrc

Product: cm1 apr 1.6.3-1 on CBL Mariner 1.0Fixed in: 1.6.3-1

microsoftpatch availablevia msrc

Product: 16894-16820Fixed in: 1.6.3-1

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_bmx-0:0.9.6-15.GA.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_1.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-httpd-0:2.4.23-125.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_bmx-0:0.9.6-15.GA.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_1.jbcs.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: apr-0:1.3.9-5.el6_9.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.4 Advanced Update SupportFixed in: apr-0:1.3.9-5.el6_4.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.5 Advanced Update SupportFixed in: apr-0:1.3.9-5.el6_5.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.6 Advanced Update SupportFixed in: apr-0:1.3.9-5.el6_6.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.6 Telco Extended Update SupportFixed in: apr-0:1.3.9-5.el6_6.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6.7 Extended Update SupportFixed in: apr-0:1.3.9-5.el6_7.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: apr-0:1.4.8-3.el7_4.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.2 Advanced Update SupportFixed in: apr-0:1.4.8-3.el7_2.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.2 Telco Extended Update SupportFixed in: apr-0:1.4.8-3.el7_2.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.2 Update Services for SAP SolutionsFixed in: apr-0:1.4.8-3.el7_2.1

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3.1

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: mod_cluster-0:1.3.8-2.Final_redhat_2.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat7-0:7.0.70-25.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat8-0:8.0.36-29.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat-native-0:1.2.8-11.redhat_11.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat-vault-0:1.1.6-1.Final_redhat_1.1.ep7.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: mod_cluster-0:1.3.8-2.Final_redhat_2.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat7-0:7.0.70-25.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat8-0:8.0.36-29.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat-native-0:1.2.8-11.redhat_11.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat-vault-0:1.1.6-1.Final_redhat_1.1.ep7.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: httpd24-apr-0:1.5.1-1.el6.1

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: httpd24-apr-0:1.5.1-1.el6.1

redhatpatch availablevia redhat_api

Product: Text-Only JBCS

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.3 Extended Update SupportFixed in: apr-0:1.4.8-3.el7_3.1

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-httpd-0:2.4.23-125.jbcs.el6

redhatno patchvia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6Fixed in: httpd

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: apr

redhatend of lifevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 3Fixed in: apr

Vendor Advisories (2)

redhatCVE-2017-12613Important

apr: Out-of-bounds array deref in apr_time_exp*() functions

microsoft2017-Oct/CVE-2017-12613Important

When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.

References

access.redhat.com / errata/RHSA-2017:3270

Third Party Advisory

access.redhat.com / errata/RHSA-2017:3475

Third Party Advisory

access.redhat.com / errata/RHSA-2017:3476

Third Party Advisory

access.redhat.com / errata/RHSA-2017:3477

Third Party Advisory

access.redhat.com / errata/RHSA-2018:0316

Third Party Advisory

access.redhat.com / errata/RHSA-2018:0465

Third Party Advisory

access.redhat.com / errata/RHSA-2018:0466

Third Party Advisory

access.redhat.com / errata/RHSA-2018:1253

Third Party Advisory

lists.apache.org / thread.html/12489f2e4a9f9d390235c16298aca0d20658789de80d553513977f13%40%3Cannounce.apache.org%3E

Issue TrackingVendor Advisory

lists.apache.org / thread.html/r270dd5022db194b78acaf509216a33c85f3da43757defa05cc766339%40%3Ccommits.apr.apache.org%3E

lists.apache.org / thread.html/ra2868b53339a6af65577146ad87016368c138388b09bff9d2860f50e%40%3Cdev.apr.apache.org%3E

lists.apache.org / thread.html/ra38094406cc38a05218ebd1158187feda021b0c3a1df400bbf296af8%40%3Cdev.apr.apache.org%3E

lists.apache.org / thread.html/rb1f3c85f50fbd924a0051675118d1609e57957a02ece7facb723155b%40%3Cannounce.apache.org%3E

lists.apache.org / thread.html/rcc48a0acebbd74bbdeebc02ff228bb72c0631b21823fffe27d4691e9%40%3Ccommits.apr.apache.org%3E

lists.debian.org / debian-lts-announce/2017/11/msg00005.html

Mailing ListThird Party Advisory

lists.debian.org / debian-lts-announce/2022/01/msg00023.html

Mailing ListThird Party Advisory

svn.apache.org / viewvc

Issue TrackingThird Party Advisory

apache.org / dist/apr/Announcement1.x.html

Release NotesVendor Advisory

openwall.com / lists/oss-security/2021/08/23/1

Mailing ListThird Party Advisory

securityfocus.com / bid/101560

Broken Link

securitytracker.com / id/1042004

Third Party AdvisoryVDB Entry