Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer.
This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-apr-utilalma-upgrade-apr-util-bdbalma-upgrade-apr-util-develalma-upgrade-apr-util-ldapalma-upgrade-apr-util-mysqlalma-upgrade-apr-util-odbcalma-upgrade-apr-util-opensslalma-upgrade-apr-util-pgsqlalma-upgrade-apr-util-sqlite | May 23, 2023 | Jan 31, 2023 | |
| Alpine Linux | alpine-linux-upgrade-apr-utilalpine-linux-upgrade-apr | Mar 26, 2024 | Jan 31, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-apr-utilamazon-linux-ami-2-upgrade-apr-util-bdbamazon-linux-ami-2-upgrade-apr-util-debuginfoamazon-linux-ami-2-upgrade-apr-util-develamazon-linux-ami-2-upgrade-apr-util-ldapamazon-linux-ami-2-upgrade-apr-util-mysqlamazon-linux-ami-2-upgrade-apr-util-nssamazon-linux-ami-2-upgrade-apr-util-odbcamazon-linux-ami-2-upgrade-apr-util-opensslamazon-linux-ami-2-upgrade-apr-util-pgsqlamazon-linux-ami-2-upgrade-apr-util-sqlite | Feb 16, 2023 | Jan 31, 2023 | |
| Amazon_linux | — | amazon-linux-upgrade-apr-util | Feb 15, 2023 | Jan 31, 2023 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-apr-utilamazon-linux-2023-upgrade-apr-util-debuginfoamazon-linux-2023-upgrade-apr-util-debugsourceamazon-linux-2023-upgrade-apr-util-develamazon-linux-2023-upgrade-apr-util-ldapamazon-linux-2023-upgrade-apr-util-ldap-debuginfoamazon-linux-2023-upgrade-apr-util-mysqlamazon-linux-2023-upgrade-apr-util-mysql-debuginfoamazon-linux-2023-upgrade-apr-util-odbcamazon-linux-2023-upgrade-apr-util-odbc-debuginfoamazon-linux-2023-upgrade-apr-util-opensslamazon-linux-2023-upgrade-apr-util-openssl-debuginfoamazon-linux-2023-upgrade-apr-util-pgsqlamazon-linux-2023-upgrade-apr-util-pgsql-debuginfoamazon-linux-2023-upgrade-apr-util-sqliteamazon-linux-2023-upgrade-apr-util-sqlite-debuginfo | Feb 17, 2025 | Jan 31, 2023 | |
| Centos_linux | — | centos-upgrade-apr-utilcentos-upgrade-apr-util-debuginfocentos-upgrade-apr-util-develcentos-upgrade-apr-util-ldapcentos-upgrade-apr-util-mysqlcentos-upgrade-apr-util-nsscentos-upgrade-apr-util-odbccentos-upgrade-apr-util-opensslcentos-upgrade-apr-util-pgsqlcentos-upgrade-apr-util-sqlite | May 17, 2023 | Jan 31, 2023 |
| Debian | debian-upgrade-apr-util | Feb 23, 2023 | Jan 31, 2023 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Nov 28, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-apr-util | May 18, 2023 | Jan 31, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-apr-util | Jul 5, 2023 | Jan 31, 2023 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-apr-utilhuawei-euleros-2_0_sp5-upgrade-apr-util-devel | Jun 9, 2023 | Jan 31, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-apr-utilhuawei-euleros-2_0_sp8-upgrade-apr-util-bdbhuawei-euleros-2_0_sp8-upgrade-apr-util-develhuawei-euleros-2_0_sp8-upgrade-apr-util-openssl | Jun 9, 2023 | Jan 31, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-apr-util | May 10, 2023 | Jan 31, 2023 | |
| Ibm Http_server | ibm-http_server-apply-interim-fix-ph51982-for-8_5ibm-http_server-apply-interim-fix-ph51982-for-9_0ibm-http_server-apply-fix-pack-8_5_5_24ibm-http_server-apply-fix-pack-9_0_5_15 | Nov 20, 2025 | Feb 27, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-apr-utiloracle-linux-upgrade-apr-util-bdboracle-linux-upgrade-apr-util-develoracle-linux-upgrade-apr-util-ldaporacle-linux-upgrade-apr-util-mysqloracle-linux-upgrade-apr-util-nssoracle-linux-upgrade-apr-util-odbcoracle-linux-upgrade-apr-util-openssloracle-linux-upgrade-apr-util-pgsqloracle-linux-upgrade-apr-util-sqlite | May 18, 2023 | Jan 31, 2023 |
| Redhat_linux | redhat-upgrade-apr-utilredhat-upgrade-apr-util-bdbredhat-upgrade-apr-util-bdb-debuginforedhat-upgrade-apr-util-debuginforedhat-upgrade-apr-util-debugsourceredhat-upgrade-apr-util-develredhat-upgrade-apr-util-ldapredhat-upgrade-apr-util-ldap-debuginforedhat-upgrade-apr-util-mysqlredhat-upgrade-apr-util-mysql-debuginforedhat-upgrade-apr-util-nssredhat-upgrade-apr-util-odbcredhat-upgrade-apr-util-odbc-debuginforedhat-upgrade-apr-util-opensslredhat-upgrade-apr-util-openssl-debuginforedhat-upgrade-apr-util-pgsqlredhat-upgrade-apr-util-pgsql-debuginforedhat-upgrade-apr-util-sqliteredhat-upgrade-apr-util-sqlite-debuginfo | May 17, 2023 | Jan 31, 2023 | |
| Rocky_linux | rocky-upgrade-apr-utilrocky-upgrade-apr-util-bdbrocky-upgrade-apr-util-bdb-debuginforocky-upgrade-apr-util-debuginforocky-upgrade-apr-util-debugsourcerocky-upgrade-apr-util-develrocky-upgrade-apr-util-ldaprocky-upgrade-apr-util-ldap-debuginforocky-upgrade-apr-util-mysqlrocky-upgrade-apr-util-mysql-debuginforocky-upgrade-apr-util-odbcrocky-upgrade-apr-util-odbc-debuginforocky-upgrade-apr-util-opensslrocky-upgrade-apr-util-openssl-debuginforocky-upgrade-apr-util-pgsqlrocky-upgrade-apr-util-pgsql-debuginforocky-upgrade-apr-util-sqliterocky-upgrade-apr-util-sqlite-debuginfo | Mar 5, 2024 | Jan 31, 2023 | |
| Suse | — | suse-upgrade-apr-util-develsuse-upgrade-libapr-util1suse-upgrade-libapr-util1-dbd-mysqlsuse-upgrade-libapr-util1-dbd-pgsqlsuse-upgrade-libapr-util1-dbd-sqlite3suse-upgrade-libapr-util1-dbm-dbsuse-upgrade-libapr-util1-devel | Feb 13, 2023 | Jan 31, 2023 |
| Ubuntu | ubuntu-pro-upgrade-libaprutil1ubuntu-upgrade-libaprutil1 | Mar 22, 2023 | Jan 31, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub