Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer.
This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade apr-util-ldapUpgrade apr-utilUpgrade apr-util-develUpgrade apr-util-opensslUpgrade apr-util-bdbUpgrade apr-util-pgsqlUpgrade apr-util-sqliteUpgrade apr-util-odbcUpgrade apr-util-mysql | May 23, 2023 | Jan 31, 2023 |
| Alpine Linux | — | Upgrade apr-utilUpgrade apr | Mar 26, 2024 | Jan 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade apr-util-odbcUpgrade apr-util-debuginfoUpgrade apr-util-pgsqlUpgrade apr-util-sqliteUpgrade apr-util-mysqlUpgrade apr-util-ldapUpgrade apr-util-opensslUpgrade apr-util-develUpgrade apr-utilUpgrade apr-util-bdbUpgrade apr-util-nss | Feb 16, 2023 | Jan 31, 2023 |
| Amazon_linux | — | Upgrade apr-util | Feb 15, 2023 | Jan 31, 2023 |
| Amazon_linux_2023 | — | Upgrade apr-util-odbcUpgrade apr-util-mysqlUpgrade apr-util-mysql-debuginfoUpgrade apr-util-openssl-debuginfoUpgrade apr-util-debuginfoUpgrade apr-util-sqlite-debuginfoUpgrade apr-util-ldap-debuginfoUpgrade apr-util-odbc-debuginfoUpgrade apr-util-ldapUpgrade apr-util-pgsql-debuginfoUpgrade apr-utilUpgrade apr-util-pgsqlUpgrade apr-util-debugsourceUpgrade apr-util-sqliteUpgrade apr-util-develUpgrade apr-util-openssl | Feb 17, 2025 | Jan 31, 2023 |
| Centos_linux | — | Upgrade apr-util-odbcUpgrade apr-util-mysqlUpgrade apr-util-opensslUpgrade apr-util-nssUpgrade apr-util-pgsqlUpgrade apr-utilUpgrade apr-util-sqliteUpgrade apr-util-ldapUpgrade apr-util-debuginfoUpgrade apr-util-devel | May 17, 2023 | Jan 31, 2023 |
| Debian | — | Upgrade apr-util | Feb 23, 2023 | Jan 31, 2023 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade apr-util | May 18, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade apr-util | Jul 5, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade apr-util-develUpgrade apr-util | Jun 9, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade apr-util-develUpgrade apr-util-bdbUpgrade apr-util-opensslUpgrade apr-util | Jun 9, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade apr-util | May 10, 2023 | Jan 31, 2023 |
| Ibm Http_server | — | Apply IBM HTTP Server version 8.5.5.24 or laterApply IBM HTTP Server version 9.0.5.15 or laterApply IBM HTTP Server Interim Fix PH51982 | Nov 20, 2025 | Feb 27, 2023 |
| Oracle_linux | — | Upgrade apr-util-ldapUpgrade apr-util-pgsqlUpgrade apr-util-develUpgrade apr-util-opensslUpgrade apr-util-bdbUpgrade apr-utilUpgrade apr-util-nssUpgrade apr-util-mysqlUpgrade apr-util-odbcUpgrade apr-util-sqlite | May 18, 2023 | Jan 31, 2023 |
| Redhat_linux | — | Upgrade apr-util-debugsourceUpgrade apr-util-openssl-debuginfoUpgrade apr-util-bdb-debuginfoUpgrade apr-util-opensslUpgrade apr-util-develUpgrade apr-util-pgsql-debuginfoUpgrade apr-util-mysql-debuginfoUpgrade apr-util-ldap-debuginfoUpgrade apr-util-odbc-debuginfoUpgrade apr-util-pgsqlUpgrade apr-util-mysqlUpgrade apr-utilUpgrade apr-util-sqliteUpgrade apr-util-bdbUpgrade apr-util-nssNo solution existsUpgrade apr-util-debuginfoUpgrade apr-util-sqlite-debuginfoUpgrade apr-util-ldapUpgrade apr-util-odbc | May 17, 2023 | Jan 31, 2023 |
| Rocky_linux | — | Upgrade apr-util-mysqlUpgrade apr-util-mysql-debuginfoUpgrade apr-util-sqliteUpgrade apr-util-debuginfoUpgrade apr-util-odbcUpgrade apr-util-bdb-debuginfoUpgrade apr-util-ldap-debuginfoUpgrade apr-util-debugsourceUpgrade apr-util-bdbUpgrade apr-util-openssl-debuginfoUpgrade apr-utilUpgrade apr-util-pgsqlUpgrade apr-util-sqlite-debuginfoUpgrade apr-util-odbc-debuginfoUpgrade apr-util-ldapUpgrade apr-util-develUpgrade apr-util-pgsql-debuginfoUpgrade apr-util-openssl | Mar 5, 2024 | Jan 31, 2023 |
| Suse | — | Upgrade libapr-util1-dbd-sqlite3Upgrade apr-util-develUpgrade libapr-util1-develUpgrade libapr-util1-dbd-mysqlUpgrade libapr-util1-dbm-dbUpgrade libapr-util1Upgrade libapr-util1-dbd-pgsql | Feb 13, 2023 | Jan 31, 2023 |
| Ubuntu | — | Upgrade libaprutil1Upgrade libaprutil1 (Ubuntu Pro) | Mar 22, 2023 | Jan 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub