Lucene search
+L

523 matches found

osv-suse
osv-suse
•added 2023/02/13 8:42 a.m.•9 views

SUSE-SU-2023:0389-1 Security update for apr-util

This update for apr-util fixes the following issues: - CVE-2022-25147: Fixed a buffer overflow possible with specially crafted input during base64 encoding bsc1207866...

6.5CVSS7AI score0.01417EPSS
SaveExploits0References3
Veracode
Veracode
•added 2023/02/12 4:46 p.m.•47 views

Integer Overflow

apr-util and apr is vulnerable to Integer Overflow.The vulnerability exists in aprbase64 function because it allows an attacker to write beyond bounds of a buffer which affects the apache portable runtime...

6.5CVSS6.7AI score0.01417EPSS
SaveExploits0References7Affected Software3
OpenVAS
OpenVAS
•added 2023/02/10 12:00 a.m.•22 views

SUSE: Security Advisory (SUSE-SU-2023:0324-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.4AI score0.01417EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2023/02/10 12:00 a.m.•24 views

SUSE: Security Advisory (SUSE-SU-2023:0325-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.4AI score0.01417EPSS
SaveExploits0References4
osv-suse
osv-suse
•added 2023/02/08 6:15 p.m.•4 views

SUSE-SU-2023:0325-1 Security update for apr-util

This update for apr-util fixes the following issues: - CVE-2022-25147: Fixed a buffer overflow possible with specially crafted input during base64 encoding bsc1207866...

6.5CVSS7AI score0.01417EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2023/02/02 12:00 a.m.•8 views

Slackware: Security Advisory (SSA:2023-032-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.2AI score0.01417EPSS
SaveExploits0References3
Slackware Linux
Slackware Linux
•added 2023/02/01 10:29 p.m.•50 views

[slackware-security] apr-util

New apr-util packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/apr-util-1.6.3-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: Integer Overflow or Wraparound vulnerability in...

6.5CVSS9.2AI score0.01417EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/02/01 12:00 a.m.•22 views

Slackware Linux 15.0 / current apr-util Vulnerability (SSA:2023-032-02)

The version of apr-util installed on the remote host is prior to 1.6.3. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-032-02 advisory. - Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker...

6.5CVSS6.3AI score0.01417EPSS
SaveExploits0References1
osv-ubuntu
osv-ubuntu
•added 2023/01/31 4:15 p.m.•13 views

UBUNTU-CVE-2022-25147

Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility APR-util 1.6.1 and prior versions...

6.5CVSS6.7AI score0.01417EPSS
SaveExploits0References5
Mend
Mend
•added 2023/01/31 3:54 p.m.•5 views

CVE-2022-25147

Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility APR-util 1.6.1 and prior versions...

6.9CVSS0.01417EPSS
SaveExploits0References4
CVE
CVE
•added 2023/01/31 3:54 p.m.•653 views

CVE-2022-25147

CVE-2022-25147 is an out-of-bounds write vulnerability in APR-util’s apr_base64 functions, affecting APR-util versions up to 1.6.1 (and prior). Multiple advisories note the issue and list updates to APR-util as the mitigation (e.g., RHSA-2023:3145, ALSA/ALAS advisories for AlmaLinux/Amazon Linux,...

6.5CVSS7AI score0.01417EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
•added 2023/01/31 12:00 a.m.•27 views

Huawei EulerOS: Security Advisory for apr-util (EulerOS-SA-2023-1243)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS5.2AI score0.00596EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/31 12:00 a.m.•6 views

CVE-2022-25147: Integer Overflow or Wraparound

Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility APR-util 1.6.1 and prior versions...

6.5CVSS5.8AI score0.01417EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/01/31 12:00 a.m.•11 views

PT-2023-9004

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime Utility APR-util versions 1.6.1 and prior versions. Description The issue is related to an Integer Overflow or Wraparound vulnerability in the apr base64 functions of Apache Portable Runtime Utility APR-util, allowing a...

6.5CVSS7.7AI score0.01417EPSS
SaveExploits0References76
Tenable Nessus
Tenable Nessus
•added 2023/01/30 12:00 a.m.•31 views

EulerOS Virtualization 3.0.2.2 : apr-util (EulerOS-SA-2023-1243)

According to the versions of the apr-util package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Apache Portable Runtime Utility APR-util 1.6.0 and prior fail to validate the integrity of SDBM database files used by aprsdbm...

4.7CVSS5.7AI score0.00596EPSS
SaveExploits3References2
OpenVAS
OpenVAS
•added 2022/11/24 12:00 a.m.•22 views

Ubuntu: Security Advisory (USN-5737-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS5.2AI score0.00596EPSS
SaveExploits3References2
Ubuntu
Ubuntu
•added 2022/11/23 10:09 a.m.•52 views

USN-5737-1: APR-util vulnerability

It was discovered that APR-util did not properly handle memory when using SDBM database files. A local attacker with write access to the database can make a program or process using these functions crash, and cause a denial of service...

4.7CVSS5.7AI score0.00596EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2022/11/23 12:00 a.m.•36 views

Ubuntu 16.04 ESM : APR-util vulnerability (USN-5737-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5737-1 advisory. It was discovered that APR-util did not properly handle memory when using SDBM database files. A local attacker with write access to the database can make a progr...

4.7CVSS5.7AI score0.00596EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2022/05/26 12:00 a.m.•38 views

EulerOS 2.0 SP3 : apr-util (EulerOS-SA-2022-1704)

According to the versions of the apr-util packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Apache Portable Runtime Utility APR-util 1.6.0 and prior fail to validate the integrity of SDBM database files used by aprsdbm functions,...

4.7CVSS5.8AI score0.00596EPSS
SaveExploits3References2
OpenVAS
OpenVAS
•added 2022/05/25 12:00 a.m.•16 views

Huawei EulerOS: Security Advisory for apr-util (EulerOS-SA-2022-1704)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS5.2AI score0.00596EPSS
SaveExploits3References2
Rows per page
Query Builder