PT-2023-8451

🗓️ 31 Jan 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

APR 1.7.0 integer overflow in apr encode risks remote code execution; update when fix is released.

Reporter	Title	Published	Views	Family All 243
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM HTTP Server affect WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On	9 Mar 202302:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to multiple vulnerabilities due to the included Apache HTTP Server and Apache Portable Runtime	28 Feb 202301:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring included WebSphere Application Server and IBM HTTP Server used by WebSphere Application Server	30 Mar 202318:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.9	15 Apr 202502:49	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server (CVE-2022-28331, CVE-2022-36760, CVE-2022-37436, CVE-2022-25147, CVE-2006-20001)	2 Mar 202320:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities has been identified in IBM HTTP Server shipped with IBM Rational ClearCase [CVE-2022-28331, CVE-2022-36760, CVE-2022-37436, CVE-2022-25147, CVE-2006-20001]	3 Mar 202306:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in apr 1.7.0-12.el9_3	8 Jul 202507:00	–	ibm
Tenable Nessus	Amazon Linux 2023 : apr, apr-devel (ALAS2023-2023-016)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : apr, apr-devel (ALAS2023-2024-789)	11 Dec 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : apr, apr-devel (ALAS-2023-1936)	14 Feb 202300:00	–	nessus

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
osv	www.osv.dev/vulnerability/USN-5885-1
errata	www.errata.msvsphere-os.ru/definition/9/INFCSA-2023:7711
osv	www.osv.dev/vulnerability/DEBIAN-CVE-2022-24963
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
lists	www.lists.apache.org/thread/fw9p6sdncwsjkstwc066vz57xqzfksq9
osv	www.osv.dev/vulnerability/openSUSE-SU-2024:12655-1
openeuler	www.openeuler.org/en/security/safety-bulletin/detail.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-24963
openeuler	www.openeuler.org/en/security/safety-bulletin/detail.html

10 Dec 2025 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 23.6 - 10

CVSS 3.19.8

EPSS0.00303

SSVC