SUSE-SU-2023:0389-1 Security update for apr-util

This update for apr-util fixes the following issues: - CVE-2022-25147: Fixed a buffer overflow possible with specially crafted input during base64 encoding bsc1207866...

Critical Photon OS Security Update - PHSA-2023-4.0-0331

Updates of 'apr' packages of Photon OS have been released...

Integer Overflow

apr-util and apr is vulnerable to Integer Overflow.The vulnerability exists in aprbase64 function because it allows an attacker to write beyond bounds of a buffer which affects the apache portable runtime...

SUSE: Security Advisory (SUSE-SU-2023:0325-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0324-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:0325-1 Security update for apr-util

This update for apr-util fixes the following issues: - CVE-2022-25147: Fixed a buffer overflow possible with specially crafted input during base64 encoding bsc1207866...

Integer Overflow

apr is vulnerable to Integer Overflow. The vulnerability exists in the aprencode function because it writes beyond bounds of a buffer by the attacker which will result of an integer operation not fitting the allocated memory space...

Slackware: Security Advisory (SSA:2023-032-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2023-032-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] apr-util

New apr-util packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/apr-util-1.6.3-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: Integer Overflow or Wraparound vulnerability in...

[slackware-security] apr

New apr packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/apr-1.7.2-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Integer Overflow or Wraparound vulnerability in aprencode...

Slackware Linux 15.0 / current apr Multiple Vulnerabilities (SSA:2023-032-01)

The version of apr installed on the remote host is prior to 1.7.2. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-032-01 advisory. - When aprtimeexp or aprosexptime functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 a...

Slackware Linux 15.0 / current apr-util Vulnerability (SSA:2023-032-02)

The version of apr-util installed on the remote host is prior to 1.6.3. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-032-02 advisory. - Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker...

DEBIAN-CVE-2022-25147

Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility APR-util 1.6.1 and prior versions...

AZL-13226 CVE-2022-24963 affecting package apr for versions less than 1.7.2-1

Integer Overflow or Wraparound vulnerability in aprencode functions of Apache Portable Runtime APR allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime APR version 1.7.0...

UBUNTU-CVE-2022-25147

Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility APR-util 1.6.1 and prior versions...

CVE-2022-25147

CVE-2022-25147 is an out-of-bounds write vulnerability in APR-util’s apr_base64 functions, affecting APR-util versions up to 1.6.1 (and prior). Multiple advisories note the issue and list updates to APR-util as the mitigation (e.g., RHSA-2023:3145, ALSA/ALAS advisories for AlmaLinux/Amazon Linux,...

CVE-2022-24963

CVE-2022-24963. Apache Portable Runtime (APR) has an integer overflow in apr_encode functions that can write beyond buffer bounds. Public details confirm affected software APR 1.7.x, with reports stating APR versions less than 1.7.2-1 are vulnerable; a patched version APR 1.7.2-1 (and newer relea...

PT-2023-9004 · Apache +10 · Apr-Util +10

Name of the Vulnerable Software and Affected Versions: Apache Portable Runtime Utility APR-util versions 1.6.1 and prior versions. Description: The issue is related to an Integer Overflow or Wraparound vulnerability in the apr base64 functions of Apache Portable Runtime Utility APR-util, allowing...

Huawei EulerOS: Security Advisory for apr-util (EulerOS-SA-2023-1243)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...