PT-2023-9004 · Apache+10 · Apr-Util+10
Ronald Crane
·
Publicado
2023-01-31
·
Atualizado
2024-10-15
·
CVE-2022-25147
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Apache Portable Runtime Utility (APR-util) versions 1.6.1 and prior versions.
Description
The issue is related to an Integer Overflow or Wraparound vulnerability in the
apr base64 functions of Apache Portable Runtime Utility (APR-util), allowing an attacker to write beyond the bounds of a buffer. This can potentially enable a remote attacker to execute arbitrary code.Recommendations
For Apache Portable Runtime Utility (APR-util) versions 1.6.1 and prior versions, update to a version later than 1.6.1 to resolve the issue. As a temporary workaround, consider restricting access to the
apr base64 functions to minimize the risk of exploitation.Correção
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Apr-Util
Almalinux
Astra Linux
Centos
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu