Описание
Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer.
This issue affects Apache Portable Runtime (APR) version 1.7.0.
A flaw was found in Apache Portable Runtime (APR). This issue may allow a malicious attacker to write beyond the bounds of a buffer.
Отчет
Versions of "apr-util" shipped with Red Hat Enterprise Linux-6, 7, 8, and 9 are not affected. "apr_encode_*" API, which contains the affected code was added in apr-utils v1.7.0, whereas, RHEL ships apr-util v1.6.1 and lower.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | apr | Not affected | ||
| Red Hat Enterprise Linux 6 | apr-util | Not affected | ||
| Red Hat Enterprise Linux 7 | apr | Not affected | ||
| Red Hat Enterprise Linux 7 | apr-util | Not affected | ||
| Red Hat Enterprise Linux 8 | apr | Not affected | ||
| Red Hat Enterprise Linux 8 | apr-util | Not affected | ||
| Red Hat Enterprise Linux 9 | apr-util | Not affected | ||
| JBoss Core Services for RHEL 8 | jbcs-httpd24-apr | Fixed | RHSA-2023:4629 | 15.08.2023 |
| JBoss Core Services on RHEL 7 | jbcs-httpd24-apr | Fixed | RHSA-2023:4629 | 15.08.2023 |
| JWS 5.7.4 release | apr | Fixed | RHSA-2023:4910 | 04.09.2023 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.
Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.
Integer Overflow or Wraparound vulnerability in apr_encode functions o ...
Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.
EPSS
6.5 Medium
CVSS3