Apache Portable Runtime (Apr)
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_portable_runtime_(apr):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Portable Runtime (Apr) (b2c44d7b-5b25-54cb-b679-a60031283c35) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-49582 |
vulnerable | 2026-06-08 06:14:29.207842 |
Apache Portable Runtime (APR): Unexpected lax shared memory permissions
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data.
This issue does not affect non-Unix platforms, or builds with APR_USE_SHMEM_SHMGET=1 (apr.h)
Users are recommended to upgrade to APR version 1.7.5, which fixes this issue.
Published: 2024-08-26T14:03:44.588Z
Updated: 2025-03-13T14:25:56.517Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28331 |
vulnerable | 2026-06-08 05:42:44.404192 |
Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function
On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer overflow.
Published: 2023-01-31T15:55:21.488Z
Updated: 2025-03-27T14:31:30.494Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24963 |
vulnerable | 2026-06-08 05:41:45.010305 |
Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions
Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer.
This issue affects Apache Portable Runtime (APR) version 1.7.0.
Published: 2023-01-31T15:52:09.716Z
Updated: 2025-03-27T14:33:39.826Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35940 |
vulnerable | 2026-06-08 05:32:49.423664 |
Regression of CVE-2017-12613
An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 and is vulnerable to the same issue.
Published: 2021-08-23T10:00:10.000Z
Updated: 2024-08-04T00:40:47.582Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.