Search for packages
| purl | pkg:deb/debian/apr@1.2.7-8.2 |
| Next non-vulnerable version | 1.7.2-3+deb12u1 |
| Latest non-vulnerable version | 1.7.2-3+deb12u1 |
| Risk | 9.6 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-29bh-jatc-73ad
Aliases: CVE-2012-0840 |
Memory consumption errors in Apache Portable Runtime and APR Utility Library could result in Denial of Service. |
Affected by 3 other vulnerabilities. |
|
VCID-3cea-3rkm-r7gs
Aliases: CVE-2011-0419 |
A flaw was found in the apr_fnmatch() function of the bundled APR library. Where mod_autoindex is enabled, and a directory indexed by mod_autoindex contained files with sufficiently long names, a remote attacker could send a carefully crafted request which would cause excessive CPU usage. This could be used in a denial of service attack. Workaround: Setting the 'IgnoreClient' option to the 'IndexOptions' directive disables processing of the client-supplied request query arguments, preventing this attack. Resolution: Update APR to release 1.4.5 (bundled with httpd 2.2.19) or release 0.9.20 (bundled with httpd 2.0.65) |
Affected by 3 other vulnerabilities. |
|
VCID-3qre-qddd-eqgk
Aliases: CVE-2022-24963 |
apr: integer overflow/wraparound in apr_encode |
Affected by 1 other vulnerability. |
|
VCID-jdxe-krj9-8kax
Aliases: CVE-2017-12613 |
apr: Out-of-bounds array deref in apr_time_exp*() functions |
Affected by 2 other vulnerabilities. |
|
VCID-qebd-7szr-y7cx
Aliases: CVE-2011-1928 |
Memory consumption errors in Apache Portable Runtime and APR Utility Library could result in Denial of Service. |
Affected by 3 other vulnerabilities. |
|
VCID-umuk-3n1q-3qet
Aliases: CVE-2009-2412 |
A flaw in apr_palloc() in the bundled copy of APR could cause heap overflows in programs that try to apr_palloc() a user controlled size. The Apache HTTP Server itself does not pass unsanitized user-provided sizes to this function, so it could only be triggered through some other application which uses apr_palloc() in a vulnerable way. |
Affected by 6 other vulnerabilities. |
|
VCID-xz52-5z1u-cuf9
Aliases: CVE-2021-35940 |
apr: Regression of CVE-2017-12613 fix in apr 1.7 |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||