Apache Software Foundation Portable Runtime 1.7.0
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:portable_runtime:1.7.0:*:*:*:*:*:*:*
part: a version: 1.7.0 update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Portable Runtime (dc6ee12d-2263-594e-9845-75b41d653912) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/apr |
purl2cpe | 2026-06-01 10:14:30.140011 |
pkg:deb/debian/apr |
purl2cpe | 2026-06-01 10:14:30.140013 |
pkg:deb/ubuntu/apr |
purl2cpe | 2026-06-01 10:14:30.140014 |
pkg:github/apache/apr |
purl2cpe | 2026-06-01 10:14:30.140015 |
pkg:gitlab/redhat/apr |
purl2cpe | 2026-06-01 10:14:30.140017 |
pkg:rpm/centos/apr |
purl2cpe | 2026-06-01 10:14:30.140018 |
pkg:rpm/fedora/apr |
purl2cpe | 2026-06-01 10:14:30.140019 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-24963 |
vulnerable | 2026-06-08 05:41:45.011284 |
Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions
Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer.
This issue affects Apache Portable Runtime (APR) version 1.7.0.
Published: 2023-01-31T15:52:09.716Z
Updated: 2025-03-27T14:33:39.826Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35940 |
vulnerable | 2026-06-08 05:32:49.424726 |
Regression of CVE-2017-12613
An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 and is vulnerable to the same issue.
Published: 2021-08-23T10:00:10.000Z
Updated: 2024-08-04T00:40:47.582Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.