Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer.
This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade apr-utilUpgrade apr-util-develUpgrade apr-util-bdbUpgrade apr-util-pgsqlUpgrade apr-util-opensslUpgrade apr-util-ldapUpgrade apr-util-odbcUpgrade apr-util-mysqlUpgrade apr-util-sqlite | May 23, 2023 | Jan 31, 2023 |
| Alpine Linux | — | Upgrade aprUpgrade apr-util | Mar 26, 2024 | Jan 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade apr-util-debuginfoUpgrade apr-util-odbcUpgrade apr-util-sqliteUpgrade apr-utilUpgrade apr-util-mysqlUpgrade apr-util-opensslUpgrade apr-util-pgsqlUpgrade apr-util-ldapUpgrade apr-util-nssUpgrade apr-util-develUpgrade apr-util-bdb | Feb 16, 2023 | Jan 31, 2023 |
| Amazon_linux | — | Upgrade apr-util | Feb 15, 2023 | Jan 31, 2023 |
| Amazon_linux_2023 | — | Upgrade apr-util-mysql-debuginfoUpgrade apr-util-debuginfoUpgrade apr-util-mysqlUpgrade apr-util-openssl-debuginfoUpgrade apr-util-sqlite-debuginfoUpgrade apr-util-odbcUpgrade apr-util-pgsqlUpgrade apr-util-opensslUpgrade apr-util-ldap-debuginfoUpgrade apr-util-develUpgrade apr-util-debugsourceUpgrade apr-util-sqliteUpgrade apr-util-odbc-debuginfoUpgrade apr-utilUpgrade apr-util-ldapUpgrade apr-util-pgsql-debuginfo | Feb 17, 2025 | Jan 31, 2023 |
| Centos_linux | — | Upgrade apr-util-mysqlUpgrade apr-util-odbcUpgrade apr-util-nssUpgrade apr-util-opensslUpgrade apr-util-pgsqlUpgrade apr-utilUpgrade apr-util-sqliteUpgrade apr-util-ldapUpgrade apr-util-develUpgrade apr-util-debuginfo | May 17, 2023 | Jan 31, 2023 |
| Debian | — | Upgrade apr-util | Feb 23, 2023 | Jan 31, 2023 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade apr-util | May 18, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade apr-util | Jul 5, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade apr-util-develUpgrade apr-util | Jun 9, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade apr-util-bdbUpgrade apr-util-develUpgrade apr-util-opensslUpgrade apr-util | Jun 9, 2023 | Jan 31, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade apr-util | May 10, 2023 | Jan 31, 2023 |
| Ibm Http_server | — | Apply IBM HTTP Server version 9.0.5.15 or laterApply IBM HTTP Server Interim Fix PH51982Apply IBM HTTP Server version 8.5.5.24 or later | Nov 20, 2025 | Feb 27, 2023 |
| Oracle_linux | — | Upgrade apr-util-opensslUpgrade apr-util-develUpgrade apr-util-pgsqlUpgrade apr-util-bdbUpgrade apr-util-ldapUpgrade apr-util-odbcUpgrade apr-util-sqliteUpgrade apr-util-mysqlUpgrade apr-util-nssUpgrade apr-util | May 18, 2023 | Jan 31, 2023 |
| Redhat_linux | — | Upgrade apr-util-debuginfoUpgrade apr-util-odbcUpgrade apr-util-nssUpgrade apr-util-bdbNo solution existsUpgrade apr-util-sqlite-debuginfoUpgrade apr-util-ldapUpgrade apr-util-sqliteUpgrade apr-util-opensslUpgrade apr-util-debugsourceUpgrade apr-utilUpgrade apr-util-develUpgrade apr-util-odbc-debuginfoUpgrade apr-util-pgsqlUpgrade apr-util-ldap-debuginfoUpgrade apr-util-pgsql-debuginfoUpgrade apr-util-openssl-debuginfoUpgrade apr-util-bdb-debuginfoUpgrade apr-util-mysql-debuginfoUpgrade apr-util-mysql | May 17, 2023 | Jan 31, 2023 |
| Rocky_linux | — | Upgrade apr-util-mysqlUpgrade apr-util-debuginfoUpgrade apr-util-odbcUpgrade apr-util-sqliteUpgrade apr-util-mysql-debuginfoUpgrade apr-util-develUpgrade apr-util-sqlite-debuginfoUpgrade apr-util-bdb-debuginfoUpgrade apr-utilUpgrade apr-util-pgsql-debuginfoUpgrade apr-util-opensslUpgrade apr-util-ldap-debuginfoUpgrade apr-util-pgsqlUpgrade apr-util-odbc-debuginfoUpgrade apr-util-debugsourceUpgrade apr-util-ldapUpgrade apr-util-bdbUpgrade apr-util-openssl-debuginfo | Mar 5, 2024 | Jan 31, 2023 |
| Suse | — | Upgrade libapr-util1-dbd-sqlite3Upgrade apr-util-develUpgrade libapr-util1-develUpgrade libapr-util1-dbd-pgsqlUpgrade libapr-util1-dbm-dbUpgrade libapr-util1-dbd-mysqlUpgrade libapr-util1 | Feb 13, 2023 | Jan 31, 2023 |
| Ubuntu | — | Upgrade libaprutil1 (Ubuntu Pro)Upgrade libaprutil1 | Mar 22, 2023 | Jan 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub