Approved changes feed: RSS · Atom

cpe:2.3:a:apache:portable_runtime:1.4.0:*:*:*:*:*:*:*

part: a version: 1.4.0 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductPortable Runtime (dc6ee12d-2263-594e-9845-75b41d653912)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/apr purl2cpe 2026-06-01 10:14:30.139841
pkg:deb/debian/apr purl2cpe 2026-06-01 10:14:30.139843
pkg:deb/ubuntu/apr purl2cpe 2026-06-01 10:14:30.139844
pkg:github/apache/apr purl2cpe 2026-06-01 10:14:30.139845
pkg:gitlab/redhat/apr purl2cpe 2026-06-01 10:14:30.139847
pkg:rpm/centos/apr purl2cpe 2026-06-01 10:14:30.139848
pkg:rpm/fedora/apr purl2cpe 2026-06-01 10:14:30.139849

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-0840 vulnerable 2026-06-08 05:00:45.765418 Details available
tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
Published: 2012-02-10T19:00:00.000Z
Updated: 2024-08-06T18:38:14.789Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.