Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer.
This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade apr-utilUpgrade apr-util-ldapUpgrade apr-util-develUpgrade apr-util-pgsqlUpgrade apr-util-opensslUpgrade apr-util-bdbUpgrade apr-util-odbcUpgrade apr-util-sqliteUpgrade apr-util-mysql | May 23, 2023 | Jan 31, 2023 |
| Alpine Linux | — | Upgrade aprUpgrade apr-util | Mar 26, 2024 | Jan 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade apr-util-odbcUpgrade apr-util-debuginfoUpgrade apr-util-ldapUpgrade apr-util-develUpgrade apr-util-pgsqlUpgrade apr-utilUpgrade apr-util-mysqlUpgrade apr-util-sqliteUpgrade apr-util-bdbUpgrade apr-util-nssUpgrade apr-util-openssl | Feb 16, 2023 | Jan 31, 2023 |
| Amazon_linux | — | Upgrade apr-util | Feb 15, 2023 | Jan 31, 2023 |
| Amazon_linux_2023 | — | Upgrade apr-util-sqlite-debuginfoUpgrade apr-util-debuginfoUpgrade apr-util-odbcUpgrade apr-util-openssl-debuginfoUpgrade apr-util-mysqlUpgrade apr-util-mysql-debuginfoUpgrade apr-util-pgsqlUpgrade apr-util-sqliteUpgrade apr-util-develUpgrade apr-util-debugsourceUpgrade apr-util-ldapUpgrade apr-util-odbc-debuginfoUpgrade apr-utilUpgrade apr-util-pgsql-debuginfoUpgrade apr-util-opensslUpgrade apr-util-ldap-debuginfo | Feb 17, 2025 | Jan 31, 2023 |
| Centos_linux | — | Upgrade apr-utilUpgrade apr-util-sqliteUpgrade apr-util-debuginfoUpgrade apr-util-develUpgrade apr-util-ldapUpgrade apr-util-pgsqlUpgrade apr-util-opensslUpgrade apr-util-nssUpgrade apr-util-odbcUpgrade apr-util-mysql | May 17, 2023 | Jan 31, 2023 |
| Debian | — | Upgrade apr-util | Feb 23, 2023 | Jan 31, 2023 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade apr-util | May 18, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade apr-util | Jul 5, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade apr-utilUpgrade apr-util-devel | Jun 9, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade apr-util-bdbUpgrade apr-util-opensslUpgrade apr-util-develUpgrade apr-util | Jun 9, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade apr-util | May 10, 2023 | Jan 31, 2023 |
| Ibm Http_server | — | Apply IBM HTTP Server version 8.5.5.24 or laterApply IBM HTTP Server version 9.0.5.15 or laterApply IBM HTTP Server Interim Fix PH51982 | Nov 20, 2025 | Feb 27, 2023 |
| Oracle_linux | — | Upgrade apr-util-odbcUpgrade apr-utilUpgrade apr-util-nssUpgrade apr-util-mysqlUpgrade apr-util-sqliteUpgrade apr-util-ldapUpgrade apr-util-pgsqlUpgrade apr-util-bdbUpgrade apr-util-develUpgrade apr-util-openssl | May 18, 2023 | Jan 31, 2023 |
| Redhat_linux | — | Upgrade apr-util-sqlite-debuginfoNo solution existsUpgrade apr-util-bdbUpgrade apr-util-sqliteUpgrade apr-util-debuginfoUpgrade apr-util-nssUpgrade apr-util-odbcUpgrade apr-util-ldapUpgrade apr-util-develUpgrade apr-util-odbc-debuginfoUpgrade apr-util-ldap-debuginfoUpgrade apr-util-pgsqlUpgrade apr-util-mysqlUpgrade apr-util-mysql-debuginfoUpgrade apr-util-bdb-debuginfoUpgrade apr-util-pgsql-debuginfoUpgrade apr-util-opensslUpgrade apr-util-debugsourceUpgrade apr-utilUpgrade apr-util-openssl-debuginfo | May 17, 2023 | Jan 31, 2023 |
| Rocky_linux | — | Upgrade apr-util-bdb-debuginfoUpgrade apr-util-openssl-debuginfoUpgrade apr-util-pgsql-debuginfoUpgrade apr-util-bdbUpgrade apr-util-odbc-debuginfoUpgrade apr-util-sqlite-debuginfoUpgrade apr-util-pgsqlUpgrade apr-utilUpgrade apr-util-ldap-debuginfoUpgrade apr-util-debugsourceUpgrade apr-util-opensslUpgrade apr-util-develUpgrade apr-util-ldapUpgrade apr-util-mysql-debuginfoUpgrade apr-util-mysqlUpgrade apr-util-sqliteUpgrade apr-util-odbcUpgrade apr-util-debuginfo | Mar 5, 2024 | Jan 31, 2023 |
| Suse | — | Upgrade libapr-util1Upgrade libapr-util1-dbd-mysqlUpgrade libapr-util1-dbm-dbUpgrade libapr-util1-develUpgrade libapr-util1-dbd-pgsqlUpgrade apr-util-develUpgrade libapr-util1-dbd-sqlite3 | Feb 13, 2023 | Jan 31, 2023 |
| Ubuntu | — | Upgrade libaprutil1 (Ubuntu Pro)Upgrade libaprutil1 | Mar 22, 2023 | Jan 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub