Portable runtime

This hub aggregates every CVE we track for Portable runtime, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 9 most recently published vulnerabilities affecting Portable runtime.

• CVE-2023-49582Apache Portable Runtime (APR): Unexpected lax shared memory permissions5.5Aug 26, 2024
• CVE-2022-28331Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function9.8Jan 31, 2023
• CVE-2022-24963Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions9.8Jan 31, 2023
• CVE-2021-35940Regression of CVE-2017-126137.1Aug 23, 2021
• CVE-2017-12613When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting...7.1Oct 24, 2017
• CVE-2012-0840tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-depend...5.0Feb 10, 2012
• CVE-2011-0419Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c i...4.3May 16, 2011
• CVE-2009-2699The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other produc...7.5Oct 13, 2009
• CVE-2009-2412Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (a...10.0Aug 6, 2009