Поиск уязвимостей
Количество 34
Количество 34
CVE-2022-28331
On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond ...
CVE-2023-49582
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APR_USE_SHMEM_SHMGET=1 (apr.h) Users are recommended to upgrade to APR version 1.7.5, which fixes this issue.
CVE-2023-49582
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APR_USE_SHMEM_SHMGET=1 (apr.h) Users are recommended to upgrade to APR version 1.7.5, which fixes this issue.
CVE-2023-49582
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APR_USE_SHMEM_SHMGET=1 (apr.h) Users are recommended to upgrade to APR version 1.7.5, which fixes this issue.
CVE-2023-49582
CVE-2023-49582
Lax permissions set by the Apache Portable Runtime library on Unix pla ...
GHSA-27j5-c395-8j82
On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer overflow.
BDU:2023-00668
Уязвимость функции apr_socket_sendv() библиотеки Apache Portable Runtime (APR) операционных систем Windows, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
SUSE-SU-2024:3429-1
Security update for apr
SUSE-SU-2024:3428-1
Security update for apr
GHSA-j26h-qjc9-68hh
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APR_USE_SHMEM_SHMGET=1 (apr.h) Users are recommended to upgrade to APR version 1.7.5, which fixes this issue.
BDU:2025-07709
Уязвимость компонента apr.h библиотеки APR, позволяющая нарушителю получить доступ к конфиденциальным данным
ROS-20241017-07
Уязвимость apr
SUSE-SU-2026:4927-1
Security update for libapr1, libtcnative-1-0, tomcat
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2022-28331 On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond ... | CVSS3: 9.8 | 2% Низкий | почти 4 года назад |
 | CVE-2023-49582 Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APR_USE_SHMEM_SHMGET=1 (apr.h) Users are recommended to upgrade to APR version 1.7.5, which fixes this issue. | CVSS3: 5.5 | 0% Низкий | около 2 лет назад |
 | CVE-2023-49582 Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APR_USE_SHMEM_SHMGET=1 (apr.h) Users are recommended to upgrade to APR version 1.7.5, which fixes this issue. | CVSS3: 5.5 | 0% Низкий | около 2 лет назад |
 | CVE-2023-49582 Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APR_USE_SHMEM_SHMGET=1 (apr.h) Users are recommended to upgrade to APR version 1.7.5, which fixes this issue. | CVSS3: 5.5 | 0% Низкий | около 2 лет назад |
 | CVSS3: 5.5 | 0% Низкий | около 2 лет назад | |
| CVE-2023-49582 Lax permissions set by the Apache Portable Runtime library on Unix pla ... | CVSS3: 5.5 | 0% Низкий | около 2 лет назад |
| GHSA-27j5-c395-8j82 On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer overflow. | CVSS3: 9.8 | 2% Низкий | почти 4 года назад |
 | BDU:2023-00668 Уязвимость функции apr_socket_sendv() библиотеки Apache Portable Runtime (APR) операционных систем Windows, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации | CVSS3: 8.8 | 2% Низкий | почти 4 года назад |
 | SUSE-SU-2024:3429-1 Security update for apr | 0% Низкий | около 2 лет назад | |
| SUSE-SU-2024:3428-1 Security update for apr | 0% Низкий | около 2 лет назад | |
| GHSA-j26h-qjc9-68hh Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APR_USE_SHMEM_SHMGET=1 (apr.h) Users are recommended to upgrade to APR version 1.7.5, which fixes this issue. | CVSS3: 5.5 | 0% Низкий | около 2 лет назад |
| BDU:2025-07709 Уязвимость компонента apr.h библиотеки APR, позволяющая нарушителю получить доступ к конфиденциальным данным | CVSS3: 5.5 | 0% Низкий | около 2 лет назад |
 | ROS-20241017-07 Уязвимость apr | CVSS3: 5.5 | 0% Низкий | около 2 лет назад |
| SUSE-SU-2026:4927-1 Security update for libapr1, libtcnative-1-0, tomcat | 11 дней назад |
Уязвимостей на страницу