CVE-2022-24963 Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions

Integer Overflow or Wraparound vulnerability in aprencode functions of Apache Portable Runtime APR allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime APR version 1.7.0...

CVE-2022-24963 Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions

Integer Overflow or Wraparound vulnerability in aprencode functions of Apache Portable Runtime APR allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime APR version 1.7.0...

CVE-2022-24963

CVE-2022-24963. Apache Portable Runtime (APR) has an integer overflow in apr_encode functions that can write beyond buffer bounds. Public details confirm affected software APR 1.7.x, with reports stating APR versions less than 1.7.2-1 are vulnerable; a patched version APR 1.7.2-1 (and newer relea...

CVE-2022-24963 Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions

Integer Overflow or Wraparound vulnerability in aprencode functions of Apache Portable Runtime APR allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime APR version 1.7.0...

Apache Portable Runtime 输入验证错误漏洞

Apache Portable Runtime is the United States Apache Apache Foundation for the upper tier applications to provide the underlying support for multiple operating system platforms across the use of the interface library . An integer overflow vulnerability exists in the Apache Portable Runtime Utility...

PT-2023-9004 · Apache +10 · Apr-Util +10

Name of the Vulnerable Software and Affected Versions: Apache Portable Runtime Utility APR-util versions 1.6.1 and prior versions. Description: The issue is related to an Integer Overflow or Wraparound vulnerability in the apr base64 functions of Apache Portable Runtime Utility APR-util, allowing...

Apache Portable Runtime 输入验证错误漏洞

Apache Portable Runtime is the United States Apache Apache Foundation for the upper tier applications to provide the underlying support for multiple operating system platforms across the use of the interface library . An out-of-bounds write vulnerability exists in Apache Portable Runtime, which c...

PT-2023-8451

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime APR version 1.7.0 Description The issue is related to an Integer Overflow or Wraparound vulnerability in the apr encode functions of Apache Portable Runtime APR, allowing an attacker to write beyond the bounds of a...

PT-2023-1354

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime versions 1.7.0 and earlier Description The issue is related to a buffer overflow in the apr socket sendv function of the Apache Portable Runtime APR library on Windows operating systems. This is caused by an integer...

Apache Portable Runtime 输入验证错误漏洞

Apache Portable Runtime is the United States Apache Apache Foundation for the upper tier applications to provide the underlying support for multiple operating system platforms across the use of the interface library . An out-of-bounds write vulnerability exists in Apache Portable Runtime, which c...

Security Bulletin: Potential denial of service may affect IBM HTTP Server on Windows (CVE-2015-1829)

Summary There is a potential denial of service that may affect IBM HTTP Server on Windows CVE-2015-1829. To exploit the attack requires local access to the server system. Vulnerability Details CVEID: CVE-2015-1829 DESCRIPTION: Apache Portable Runtime is vulnerable to a denial of service, caused b...

Security Bulletin: Vulnerabilities in Network Security Services (NSS) and Netscape Portable Runtime (NSPR) affect IBM SAN Volume Controller and Storwize Family (CVE-2013-1740, CVE-2014-1490, CVE-2014-1491, CVE-2014-1492, CVE-2014-1544, CVE-2014-1545)

Summary Vulnerabilities in Network Security Services NSS and Netscape Portable Runtime NSPR could allow a remote attacker to obtain sensitive information or cause a denial of service. Vulnerability Details CVE-ID : CVE-2013-1740 DESCRIPTION : Mozilla Network Security Services could allow a remote...

Out-Of-Bounds Read

An out-of-bounds array read in the aprtimeexp functions was fixed in the Apache Portable Runtime 1.6.3 release CVE-2017-12613. The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 and is vulnerable to the same issue...

Mageia: Security Advisory (MGASA-2021-0428)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2897-1 : apr - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2897 advisory. An issue has been found in apr, the Apache Portable Runtime Library. The issue is related to out of bounds memory access due to invalid date fields. For Debian 9 stretch,...

[SECURITY] [DLA 2897-1] apr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2897-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 24, 2022 https://wiki.debian.org/LTS -...

Fedora: Security Advisory for apr (FEDORA-2021-6ae5a11a61)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 35 Update: apr-1.7.0-14.fc35

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines, forming a system portability layer to as many operating systems as possible, including Unices, MS Win32, BeOS and OS/2...

MGASA-2021-0428 Updated apr packages fix security vulnerability

An out-of-bounds array read in the aprtimeexp functions was fixed in the Apache Portable Runtime 1.6.3 release CVE-2017-12613. The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 and is vulnerable to the same issue...

Security Bulletin: Vulnerability in nss and nspr CVE-2019-17006.

Summary Network Security Services NSS & Netscape Portable Runtime NSPR is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-17006 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox is vulnerable t...