Apache Portable Runtime Utility — known CVE vulnerabilities

Every CVE whose affected-product data names Apache Portable Runtime Utility, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-25147 — CVSS 6.5 (medium): Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to…
• CVE-2017-12618 — CVSS 4.7 (medium): Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM database files used by apr_sdbm*()…