Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apache portable runtime utility vulnerabilities and exploits

(subscribe to this query)
169
VMScore
CVE-2017-12618
Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using the...
Apache Portable Runtime Utility 1.0.2Apache Portable Runtime Utility 0.9.16Apache Portable Runtime Utility 0.9.15Apache Portable Runtime Utility 0.9.6Apache Portable Runtime Utility 0.9.5Apache Portable Runtime Utility 1.1.0Apache Portable Runtime Utility 1.2.13Apache Portable Runtime Utility 1.2.2Apache Portable Runtime Utility 1.2.1Apache Portable Runtime Utility 1.3.13Apache Portable Runtime Utility 1.3.6Apache Portable Runtime Utility 1.3.5Apache Portable Runtime Utility 1.4.2Apache Portable Runtime Utility 1.4.1Apache Portable Runtime Utility 1.6.0Apache Portable Runtime Utility 1.0.1Apache Portable Runtime Utility 1.0.0Apache Portable Runtime Utility 0.9.14Apache Portable Runtime Utility 0.9.13Apache Portable Runtime Utility 0.9.12Apache Portable Runtime Utility 0.9.4Apache Portable Runtime Utility 0.9.3
NA
CVE-2022-25147
Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an malicious user to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.
Apache Portable Runtime Utility
890
VMScore
CVE-2009-2412
Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger...
Apache Apr-util 1.3.6-devApache Portable Runtime 1.3.6-devApache Portable Runtime 1.3.7Apache Apr-util 1.3.6Apache Apr-util 0.9.2-devApache Apr-util 1.3.3Apache Apr-util 0.9.9Apache Portable Runtime 0.9.7-devApache Portable Runtime 1.3.3Apache Portable Runtime 0.9.6Apache Portable Runtime 0.9.16-devApache Portable Runtime 0.9.8Apache Portable Runtime 1.3.1Apache Portable Runtime 1.3.2Apache Portable Runtime 1.3.4Apache Apr-util 1.3.0Apache Apr-util 1.3.4Apache Apr-util 0.9.4Apache Portable Runtime 0.9.4Apache Apr-util 0.9.3Apache Portable Runtime 0.9.3Apache Apr-util 0.9.7-dev
NA
CVE-2022-24963
Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an malicious user to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.
Apache Portable Runtime 1.7.0
321
VMScore
CVE-2021-35940
An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 and is vulnerable to t...
Apache Portable Runtime 1.7.0Oracle Http Server 12.2.1.3.0Oracle Http Server 12.2.1.4.0
445
VMScore
CVE-2010-1623
Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) prior to 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote malicious users to cause a d...
Apache Apr-util 1.3.6Apache Apr-util 1.2.13Apache Apr-util 1.3.3Apache Apr-util 0.9.11Apache Apr-util 0.9.9Apache Apr-util 1.2.7Apache Apr-util 0.9.13Apache Apr-util 1.2.8Apache Apr-util 1.2.2Apache Apr-util 1.3.0Apache Apr-util 1.3.4Apache Apr-util 0.9.4Apache Apr-util 1.0.2Apache Apr-util 0.9.14Apache Apr-util 1.0Apache Apr-util 1.2.1Apache Apr-util 0.9.3Apache Apr-utilApache Apr-util 1.1.0Apache Apr-util 0.9.12Apache Apr-util 0.9.1Apache Apr-util 0.9.7
383
VMScore
CVE-2009-0023
The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util prior to 1.3.5 allows remote malicious users to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI dire...
Apache Apr-util 1.3.3Apache Apr-util 1.2.7Apache Apr-util 1.2.8Apache Apr-util 1.2.2Apache Apr-util 1.3.0Apache Apr-util 0.9.4Apache Apr-util 1.0.2Apache Apr-util 1.0Apache Apr-util 1.2.1Apache Apr-util 0.9.3Apache Apr-util 1.1.0Apache Apr-util 0.9.1Apache Apr-utilApache Apr-util 1.3.1Apache Apr-util 0.9.2Apache Apr-util 1.3.2Apache Apr-util 1.1.1Apache Apr-util 1.1.2Apache Apr-util 1.2.6Apache Apr-util 1.0.1Apache Apr-util 0.9.5Apache Http Server
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook