CVE-2023-49582

Medium

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

The Apache Portable Runtime library on Unix platforms sets lax permissions on named shared memory segments, allowing local users read access and potentially revealing sensitive application data. This issue does not affect non-Unix platforms or builds with APR_USE_SHMEM_SHMGET=1.

Risk Assessment

The risk involves potential leakage of sensitive application data by local users, which could compromise data security.

Recommendation

It is recommended to compile the APR library with APR_USE_SHMEM_SHMGET=1 or upgrade to a version with corrected permissions.

Original NVD description (English source)

Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APR_USE_SHMEM_SHMGET=1 (apr.h) Users ar