Apache Portable Runtime Utility vulnerabilities

2 known vulnerabilities affecting apache/portable_runtime_utility.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2022-25147MEDIUMCVSS 6.5≤ 1.6.12023-01-31

CVE-2022-25147 [MEDIUM] CWE-190 CVE-2022-25147: Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Util Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.

CVE-2017-12618MEDIUMCVSS 4.7v0.9.1v0.9.2+57 more2017-10-24

CVE-2017-12618 [MEDIUM] CWE-125 CVE-2017-12618: Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM da Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and cause a denial of service.