Apache Software Foundation Apache Portable Runtime Utility library (aka APR-util) 1.3.6
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:apr-util:1.3.6:*:*:*:*:*:*:*
part: a version: 1.3.6 update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Apr Util (2804f1c4-2d92-5696-95e5-5903a5b9387b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/apr |
purl2cpe | 2026-06-01 10:14:31.871157 |
pkg:github/apache/apr-util |
purl2cpe | 2026-06-01 10:14:31.871158 |
pkg:gitlab/redhat/apr-util |
purl2cpe | 2026-06-01 10:14:31.871160 |
pkg:maven/org.apache.apr/apr |
purl2cpe | 2026-06-01 10:14:31.871161 |
pkg:rpm/centos/apr-util |
purl2cpe | 2026-06-01 10:14:31.871163 |
pkg:rpm/fedora/apr-util |
purl2cpe | 2026-06-01 10:14:31.871164 |
pkg:rpm/opensuse/apr-util |
purl2cpe | 2026-06-01 10:14:31.871165 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-1623 |
vulnerable | 2026-06-08 04:54:09.391648 |
Details available
Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.
Published: 2010-10-04T20:00:00.000Z
Updated: 2024-08-07T01:28:43.040Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2412 |
vulnerable | 2026-06-08 04:51:28.337470 |
Details available
Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.
Published: 2009-08-06T15:00:00.000Z
Updated: 2024-08-07T05:52:14.398Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.