{"id":"CLEANSTART-2025-SR81641","summary":"Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data","details":"Security vulnerability affects the apr package. Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data.","modified":"2026-10-31T16:02:31.852407583Z","published":"2026-10-31T13:59:42.921059Z","upstream":["CVE-2023-49582"],"database_specific":{},"references":[{"type":"ADVISORY","url":"https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2025/CLEANSTART-2025-SR81641.json"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2023-49582"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49582"}],"affected":[{"package":{"name":"apr","ecosystem":"CleanStart","purl":"pkg:apk/cleanstart/apr"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-r0"}]}],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2025/CLEANSTART-2025-SR81641.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}