Apache Portable Runtime Apr (Apache Software Foundation) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2024-08-26. Vendor: Apache Software Foundation.

CVEs of Apache Portable Runtime Apr

• CVE-2023-49582 - CVSS 5.5 (medium), 2024-08-26: Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially…
• CVE-2022-28331 - CVSS 9.8 (critical), 2023-01-31: On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer…
• CVE-2022-24963 - CVSS 9.8 (critical), 2023-01-31: Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer.…
• CVE-2021-35940 - CVSS 7.1 (high), 2021-08-23: An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue…