Apache Portable Runtime (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2017-10-24. Vendor: Apache Software Foundation.

CVEs of Apache Portable Runtime

• CVE-2017-12613 - CVSS 7.1 (high), 2017-10-24: When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of…
• CVE-2017-12618 - CVSS 4.7 (medium), 2017-10-24: Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a…