vulnerability

Red Hat: CVE-2022-24963: apr: integer overflow/wraparound in apr_encode (Multiple Advisories)

Name: Red Hat: CVE-2022-24963: apr: integer overflow/wraparound in apr_encode (Multiple Advisories)
Creator: Red Hat
Published: 2023-01-31T00:00:00.000Z
Keywords: CVE, CWE-190, Red Hat, 2022, 24963, apr, redhat-upgrade-apr, redhat-upgrade-apr-debuginfo, redhat-upgrade-apr-debugsource, redhat-upgrade-apr-devel, Severity 6

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:P/A:P)

Published

Jan 31, 2023

Added

Dec 12, 2023

Modified

Jun 17, 2026

Description

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer.
This issue affects Apache Portable Runtime (APR) version 1.7.0.

Solutions

redhat-upgrade-aprredhat-upgrade-apr-debuginforedhat-upgrade-apr-debugsourceredhat-upgrade-apr-devel

References

CWE-190
EUVD-EUVD-2022-29715
NVD-CVE-2022-24963
REDHAT-RHSA-2023:7711
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-29715

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report