Apache Software Foundation Apache Portable Runtime
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2017-12618 | 1.6.0 and prior | Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functio | MEDIUM 4.7 | 0.6 % | ||
| CVE-2017-12613 | 1.6.2 and prior | When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and | HIGH 7.1 | 1.7 % |