Lucene search

K
rosalinuxROSA LABROSA-SA-2023-2175
HistoryJun 27, 2023 - 9:01 a.m.

Advisory ROSA-SA-2023-2175

2023-06-2709:01:47
ROSA LAB
abf.rosalinux.ru
6

0.002 Low

EPSS

Percentile

54.9%

Software: apr-util 1.5.2-6
OS: rosa-server79

package_evr_string: apr-util-1.5.2-6.res7.1

CVE-ID: CVE-2022-25147
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC.: Inte Overflow or Wraparound vulnerability in Apache Portable Runtime Utility (APR-util) apr_base64 functions allows an attacker to write data outside of the buffer. This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and earlier versions.
CVE-STATUS: Fixed
CVE-REV: Run the yum update apr-util command to close it.