Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade apr-develUpgrade apr | Dec 12, 2023 | Jan 31, 2023 |
| Alpine Linux | — | Upgrade apr | Aug 22, 2024 | Jan 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade apr-debuginfoUpgrade apr-develUpgrade apr | Feb 16, 2023 | Jan 31, 2023 |
| Amazon_linux_2023 | — | Upgrade aprUpgrade apr-debuginfoUpgrade apr-develUpgrade apr-debugsource | Feb 17, 2025 | Jan 31, 2023 |
| Centos_linux | — | Upgrade aprUpgrade apr-debuginfoUpgrade apr-develUpgrade apr-debugsource | Dec 12, 2023 | Jan 31, 2023 |
| Debian | — | Upgrade apr | Mar 9, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade apr | May 18, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade apr | Jul 5, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade apr | May 10, 2023 | Jan 31, 2023 |
| Oracle_linux | — | Upgrade aprUpgrade apr-devel | Dec 12, 2023 | Jan 31, 2023 |
| Redhat_linux | — | Upgrade aprUpgrade apr-debuginfoUpgrade apr-debugsourceUpgrade apr-devel | Dec 12, 2023 | Jan 31, 2023 |
| Rocky_linux | — | Upgrade aprUpgrade apr-develUpgrade apr-debuginfoUpgrade apr-debugsource | May 13, 2024 | Jan 31, 2023 |
| Ubuntu | — | Upgrade libapr1 | Mar 22, 2023 | Jan 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub