Product by Apache Software Foundation
Apache Portable Runtime (APR)
9 known vulnerabilities in Apache Portable Runtime (APR) (Apache Software Foundation), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2009-2699 | Apache HTTP Server: Denial of Service | 7.5 | |
| Critical | CVE-2022-28331 | Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function | 9.8 | |
| Critical | CVE-2022-24963 | Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions | 9.8 | |
| High | CVE-2017-12613 | Apache Portable Runtime: Out-of-Bounds Access | 7.1 | |
| Not rated | CVE-2012-0840 | Apache Software Foundation Portable Runtime: Denial of Service | — | |
| Not rated | CVE-2011-0419 | Apache HTTP Server: Denial of Service | — | |
| Not rated | CVE-2009-2412 | Apache Software Foundation Portable Runtime: Buffer Overflow | — | |
| High | CVE-2021-35940 | Regression of CVE-2017-12613 | 7.1 | |
| Medium | CVE-2023-49582 | Apache Portable Runtime (APR): Unexpected lax shared memory permissions | 5.5 |