Approved changes feed: RSS · Atom

cpe:2.3:a:apache:portable_runtime:0.9.3-dev:*:*:*:*:*:*:*

part: a version: 0.9.3-dev update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductPortable Runtime (dc6ee12d-2263-594e-9845-75b41d653912)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/apr purl2cpe 2026-06-01 10:14:30.104067
pkg:deb/debian/apr purl2cpe 2026-06-01 10:14:30.104068
pkg:deb/ubuntu/apr purl2cpe 2026-06-01 10:14:30.104070
pkg:github/apache/apr purl2cpe 2026-06-01 10:14:30.104071
pkg:gitlab/redhat/apr purl2cpe 2026-06-01 10:14:30.104073
pkg:rpm/centos/apr purl2cpe 2026-06-01 10:14:30.104074
pkg:rpm/fedora/apr purl2cpe 2026-06-01 10:14:30.104075

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-0840 vulnerable 2026-06-08 05:00:45.749739 Details available
tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
Published: 2012-02-10T19:00:00.000Z
Updated: 2024-08-06T18:38:14.789Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2412 vulnerable 2026-06-08 04:51:28.342200 Details available
Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.
Published: 2009-08-06T15:00:00.000Z
Updated: 2024-08-07T05:52:14.398Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.