CVE-2022-25147 Apache Portable Runtime Utility (APR-util): out-of-bounds writes in the apr_base64 family of functions

🗓️ 31 Jan 2023 15:54:51Reported by apacheType

Integer Overflow in Apache Portable Runtime Utility (APR-util

Reporter	Title	Published	Views	Family All 202
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM HTTP Server affect WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On	9 Mar 202302:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	24 Oct 202319:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to multiple vulnerabilities due to the included Apache HTTP Server and Apache Portable Runtime	28 Feb 202301:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring included WebSphere Application Server and IBM HTTP Server used by WebSphere Application Server	30 Mar 202318:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance - Identity Manager virtual appliance component	10 Jan 202404:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.9	15 Apr 202502:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from curl, go and apr-util	16 Jun 202304:09	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server (CVE-2022-28331, CVE-2022-36760, CVE-2022-37436, CVE-2022-25147, CVE-2006-20001)	2 Mar 202320:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities has been identified in IBM HTTP Server shipped with IBM Rational ClearCase [CVE-2022-28331, CVE-2022-36760, CVE-2022-37436, CVE-2022-25147, CVE-2006-20001]	3 Mar 202306:30	–	ibm
Tenable Nessus	Amazon Linux 2023 : apr-util, apr-util-devel, apr-util-ldap (ALAS2023-2023-066)	21 Mar 202300:00	–	nessus

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Portable Runtime Utility (APR-util)",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "1.6.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20240315-0001/
lists	www.lists.apache.org/thread/np5gjqlohc4f62lr09vrn61vl44cylh8

15 Mar 2024 11:06Current

7High risk

Vulners AI Score7

EPSS0.01417

CWE-190