Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-24963

Опубликовано: 31 янв. 2023
Источник: debian
EPSS Низкий

Описание

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
aprfixed1.7.2-1package
aprnot-affectedbusterpackage

Примечания

  • https://lists.apache.org/thread/fw9p6sdncwsjkstwc066vz57xqzfksq9

  • http://svn.apache.org/r1904675

EPSS

Процентиль: 34%
0.00138
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 3 лет назад

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.

CVSS3: 6.5
redhat
около 3 лет назад

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.

CVSS3: 9.8
nvd
около 3 лет назад

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.

CVSS3: 9.8
msrc
7 месяцев назад

Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions

rocky
почти 2 года назад

Moderate: apr security update

EPSS

Процентиль: 34%
0.00138
Низкий