Apache Portable Runtime Utility vulnerabilities

2 vulnerabilities

Known vulnerabilities in Apache Portable Runtime Utility, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2022-25147apache software foundationapache portable runtime utility (apr-util)+53
EPSS score
1.42%
Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.4.7CVE-2017-12618apache software foundationapache portable runtime+17
EPSS score
0.60%
Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*() functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and cause a denial of service.