Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:0337-1

Опубликовано: 09 фев. 2023
Источник: suse-cvrf

Описание

Security update for libapr-util1

This update for libapr-util1 fixes the following issues:

  • CVE-2022-25147: Fixed a buffer overflow possible with specially crafted input during base64 encoding (bsc#1207866)

Список пакетов

SUSE Linux Enterprise Server 12 SP4-LTSS
libapr-util1-1.5.3-8.7.1
libapr-util1-dbd-sqlite3-1.5.3-8.7.1
SUSE Linux Enterprise Server 12 SP5
libapr-util1-1.5.3-8.7.1
libapr-util1-dbd-sqlite3-1.5.3-8.7.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libapr-util1-1.5.3-8.7.1
libapr-util1-dbd-sqlite3-1.5.3-8.7.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libapr-util1-1.5.3-8.7.1
libapr-util1-dbd-sqlite3-1.5.3-8.7.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libapr-util1-1.5.3-8.7.1
libapr-util1-devel-1.5.3-8.7.1
SUSE OpenStack Cloud 9
libapr-util1-1.5.3-8.7.1
libapr-util1-dbd-sqlite3-1.5.3-8.7.1
SUSE OpenStack Cloud Crowbar 9
libapr-util1-1.5.3-8.7.1
libapr-util1-dbd-sqlite3-1.5.3-8.7.1

Описание

Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.


Затронутые продукты
SUSE Linux Enterprise Server 12 SP4-LTSS:libapr-util1-1.5.3-8.7.1
SUSE Linux Enterprise Server 12 SP4-LTSS:libapr-util1-dbd-sqlite3-1.5.3-8.7.1
SUSE Linux Enterprise Server 12 SP5:libapr-util1-1.5.3-8.7.1
SUSE Linux Enterprise Server 12 SP5:libapr-util1-dbd-sqlite3-1.5.3-8.7.1

Ссылки