[{"CVE":"CVE-2017-12618","severity":"moderate","public_date":"2017-10-23T00:00:00Z","advisories":[],"bugzilla":"1506532","bugzilla_description":"CVE-2017-12618 apr-util: Out-of-bounds access in corrupted SDBM database","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12618.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6312","severity":"moderate","public_date":"2016-08-04T00:00:00Z","advisories":[],"bugzilla":"1364122","bugzilla_description":"CVE-2016-6312 apr-util, httpd: Billion laughs attack regression","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6312.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2016-4472","severity":"moderate","public_date":"2016-05-15T00:00:00Z","advisories":[],"bugzilla":"1344251","bugzilla_description":"CVE-2016-4472 expat: Undefined behavior and pointer overflows","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4472.json"},{"CVE":"CVE-2010-1623","severity":"moderate","public_date":"2010-10-01T00:00:00Z","advisories":["RHSA-2011:0896","RHSA-2010:0950","RHSA-2011:0897"],"bugzilla":"640281","bugzilla_description":"CVE-2010-1623 apr-util: high memory consumption in apr_brigade_split_line()","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["apr-util-0:1.3.9-3.el6_0.1","httpd22-0:2.2.17-14.ep5.el4","apr-util-0:0.9.4-22.el4_8.3","apr-util-0:1.2.7-11.el5_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1623.json"},{"CVE":"CVE-2009-0023","severity":"moderate","public_date":"2009-06-03T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107","RHSA-2009:1160"],"bugzilla":"503928","bugzilla_description":"CVE-2009-0023 apr-util heap buffer underwrite","cvss_score":4.3,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0023.json"},{"CVE":"CVE-2009-1955","severity":"moderate","public_date":"2009-06-01T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107","RHSA-2009:1160"],"bugzilla":"504555","bugzilla_description":"CVE-2009-1955 apr-util billion laughs attack","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["httpd22-0:2.2.10-23.1.ep5.el4","apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1955.json"},{"CVE":"CVE-2009-1956","severity":"moderate","public_date":"2009-04-24T00:00:00Z","advisories":["RHSA-2010:0602","RHSA-2009:1108","RHSA-2009:1107"],"bugzilla":"504390","bugzilla_description":"CVE-2009-1956 apr-util single NULL byte buffer overflow","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["apr-util-0:1.2.7-7.el5_3.1","apr-util-0:0.9.4-22.el4_8.1","httpd-0:2.0.46-73.ent"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1956.json"}]