Portable Runtime (Apache) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 89 known versions, newest CVE from 2024-08-26. Vendor: Apache.
CVEs of Portable Runtime
- CVE-2023-49582 - CVSS 5.5 (medium), 2024-08-26: Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially…
- CVE-2022-28331 - CVSS 9.8 (critical), 2023-01-31: On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer…
- CVE-2022-24963 - CVSS 9.8 (critical), 2023-01-31: Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer.…
- CVE-2021-35940 - CVSS 7.1 (high), 2021-08-23: An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue…
- CVE-2017-12613 - CVSS 7.1 (high), 2017-10-24: When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of…
- CVE-2012-0840 - CVSS 5 (medium), 2012-02-10: tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions…
- CVE-2011-0419 - CVSS 4.3 (medium), 2011-05-16: Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP…
- CVE-2009-2699 - CVSS 7.5 (high), 2009-10-13: The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache…
- CVE-2009-2412 - CVSS 10 (critical), 2009-08-06: Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote…
