Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer.
This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade apr-util-sqliteUpgrade apr-util-mysqlUpgrade apr-util-odbcUpgrade apr-utilUpgrade apr-util-opensslUpgrade apr-util-bdbUpgrade apr-util-develUpgrade apr-util-pgsqlUpgrade apr-util-ldap | May 23, 2023 | Jan 31, 2023 |
| Alpine Linux | — | Upgrade aprUpgrade apr-util | Mar 26, 2024 | Jan 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade apr-util-debuginfoUpgrade apr-util-odbcUpgrade apr-util-ldapUpgrade apr-util-opensslUpgrade apr-util-mysqlUpgrade apr-util-pgsqlUpgrade apr-util-sqliteUpgrade apr-util-nssUpgrade apr-util-develUpgrade apr-util-bdbUpgrade apr-util | Feb 16, 2023 | Jan 31, 2023 |
| Amazon_linux | — | Upgrade apr-util | Feb 15, 2023 | Jan 31, 2023 |
| Amazon_linux_2023 | — | Upgrade apr-util-mysql-debuginfoUpgrade apr-util-sqlite-debuginfoUpgrade apr-util-odbcUpgrade apr-util-openssl-debuginfoUpgrade apr-util-mysqlUpgrade apr-util-debuginfoUpgrade apr-util-develUpgrade apr-util-sqliteUpgrade apr-util-pgsql-debuginfoUpgrade apr-util-debugsourceUpgrade apr-util-odbc-debuginfoUpgrade apr-utilUpgrade apr-util-ldapUpgrade apr-util-opensslUpgrade apr-util-pgsqlUpgrade apr-util-ldap-debuginfo | Feb 17, 2025 | Jan 31, 2023 |
| Centos_linux | — | Upgrade apr-util-sqliteUpgrade apr-util-debuginfoUpgrade apr-utilUpgrade apr-util-pgsqlUpgrade apr-util-develUpgrade apr-util-ldapUpgrade apr-util-opensslUpgrade apr-util-nssUpgrade apr-util-mysqlUpgrade apr-util-odbc | May 17, 2023 | Jan 31, 2023 |
| Debian | — | Upgrade apr-util | Feb 23, 2023 | Jan 31, 2023 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade apr-util | May 18, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade apr-util | Jul 5, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade apr-util-develUpgrade apr-util | Jun 9, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade apr-util-develUpgrade apr-util-bdbUpgrade apr-util-opensslUpgrade apr-util | Jun 9, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade apr-util | May 10, 2023 | Jan 31, 2023 |
| Ibm Http_server | — | Apply IBM HTTP Server version 9.0.5.15 or laterApply IBM HTTP Server Interim Fix PH51982Apply IBM HTTP Server version 8.5.5.24 or later | Nov 20, 2025 | Feb 27, 2023 |
| Oracle_linux | — | Upgrade apr-util-nssUpgrade apr-util-sqliteUpgrade apr-utilUpgrade apr-util-odbcUpgrade apr-util-mysqlUpgrade apr-util-opensslUpgrade apr-util-pgsqlUpgrade apr-util-develUpgrade apr-util-ldapUpgrade apr-util-bdb | May 18, 2023 | Jan 31, 2023 |
| Redhat_linux | — | Upgrade apr-util-debugsourceUpgrade apr-utilUpgrade apr-util-opensslUpgrade apr-util-pgsqlUpgrade apr-util-odbc-debuginfoUpgrade apr-util-openssl-debuginfoUpgrade apr-util-develUpgrade apr-util-mysqlUpgrade apr-util-pgsql-debuginfoUpgrade apr-util-bdb-debuginfoUpgrade apr-util-mysql-debuginfoUpgrade apr-util-ldap-debuginfoUpgrade apr-util-debuginfoUpgrade apr-util-ldapUpgrade apr-util-sqliteNo solution existsUpgrade apr-util-sqlite-debuginfoUpgrade apr-util-odbcUpgrade apr-util-bdbUpgrade apr-util-nss | May 17, 2023 | Jan 31, 2023 |
| Rocky_linux | — | Upgrade apr-util-sqliteUpgrade apr-util-mysql-debuginfoUpgrade apr-util-odbcUpgrade apr-util-debuginfoUpgrade apr-util-mysqlUpgrade apr-util-ldap-debuginfoUpgrade apr-util-debugsourceUpgrade apr-util-bdbUpgrade apr-util-odbc-debuginfoUpgrade apr-util-ldapUpgrade apr-util-pgsql-debuginfoUpgrade apr-util-opensslUpgrade apr-utilUpgrade apr-util-bdb-debuginfoUpgrade apr-util-pgsqlUpgrade apr-util-openssl-debuginfoUpgrade apr-util-develUpgrade apr-util-sqlite-debuginfo | Mar 5, 2024 | Jan 31, 2023 |
| Suse | — | Upgrade libapr-util1-dbd-sqlite3Upgrade apr-util-develUpgrade libapr-util1Upgrade libapr-util1-dbm-dbUpgrade libapr-util1-dbd-pgsqlUpgrade libapr-util1-dbd-mysqlUpgrade libapr-util1-devel | Feb 13, 2023 | Jan 31, 2023 |
| Ubuntu | — | Upgrade libaprutil1 (Ubuntu Pro)Upgrade libaprutil1 | Mar 22, 2023 | Jan 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub