Apache Software Foundation Portable Runtime 1.3.6
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:portable_runtime:1.3.6:*:*:*:*:*:*:*
part: a version: 1.3.6 update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Portable Runtime (dc6ee12d-2263-594e-9845-75b41d653912) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/apr |
purl2cpe | 2026-06-01 10:14:30.132107 |
pkg:deb/debian/apr |
purl2cpe | 2026-06-01 10:14:30.132108 |
pkg:deb/ubuntu/apr |
purl2cpe | 2026-06-01 10:14:30.132109 |
pkg:github/apache/apr |
purl2cpe | 2026-06-01 10:14:30.132111 |
pkg:gitlab/redhat/apr |
purl2cpe | 2026-06-01 10:14:30.132112 |
pkg:rpm/centos/apr |
purl2cpe | 2026-06-01 10:14:30.132114 |
pkg:rpm/fedora/apr |
purl2cpe | 2026-06-01 10:14:30.132115 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-0840 |
vulnerable | 2026-06-08 05:00:45.760912 |
Details available
tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
Published: 2012-02-10T19:00:00.000Z
Updated: 2024-08-06T18:38:14.789Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2412 |
vulnerable | 2026-06-08 04:51:28.351202 |
Details available
Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3) apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of these details are obtained from third party information.
Published: 2009-08-06T15:00:00.000Z
Updated: 2024-08-07T05:52:14.398Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.