https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:26:56.691088+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:7711 ALSA-2023:7711 — Moderate: apr security update 2026-10-03T13:26:57.029497+00:00

Affected: AlmaLinux:9: apr, AlmaLinux:9: apr-devel

The Apache Portable Runtime (APR) is a portability library used by the Apache HTTP Server and other projects. It provides a free library of C data structures and routines.

Security Fix(es):

* apr: integer overflow/wraparound in apr_encode (CVE-2022-24963)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-00850 bdu:2024-00850 2026-10-03T13:26:57.029561+00:00 bdu:2024-00850 https://cve.radiocsirt.org/vuln/bell-cve-2022-24963 Withdrawn: BELL-CVE-2022-24963 — CVE-2022-24963 does not affect BellSoft software 2026-10-03T13:26:57.029580+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-apr-2022-24963 BIT-apr-2022-24963 — Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions 2026-10-03T13:26:57.029596+00:00

Affected: Bitnami: apr

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.

 https://cve.radiocsirt.org/vuln/cnvd-2023-57672 cnvd-2023-57672 2026-10-03T13:26:57.029627+00:00 cnvd-2023-57672 https://cve.radiocsirt.org/vuln/euvd-2026-225624 EUVD-2026-225624 2026-10-03T13:26:57.029640+00:00 EUVD-2026-225624 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24963 fkie_cve-2022-24963 2026-10-03T13:26:57.029651+00:00

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.

 https://cve.radiocsirt.org/vuln/ghsa-6rr3-mpxq-hv4x GHSA-6rr3-mpxq-hv4x 2026-10-03T13:26:57.029672+00:00

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.

 https://cve.radiocsirt.org/vuln/gsd-2022-24963 gsd-2022-24963 2026-10-03T13:26:57.029685+00:00 gsd-2022-24963 https://cve.radiocsirt.org/vuln/msrc_cve-2022-24963 msrc_CVE-2022-24963 — Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions 2026-10-03T13:26:57.029696+00:00 msrc_CVE-2022-24963 https://cve.radiocsirt.org/vuln/oesa-2023-1095 OESA-2023-1095 — apr security update 2026-10-03T13:26:57.029711+00:00

Affected: openEuler:20.03-LTS-SP1: apr

The mission of the Apache Portable Runtime (APR) project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of predictable if not identical behaviour regardless of the platform on which their software is built, relieving them of the need to code special-case conditions to work around or take advantage of platform-specific deficiencies or features. Security Fix(es): Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.(CVE-2022-24963)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12655-1 openSUSE-SU-2024:12655-1 — apr-devel-1.7.2-1.1 on GA media 2026-10-03T13:26:57.029735+00:00

apr-devel-1.7.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:4629 RHSA-2023:4629 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 security update 2026-10-03T13:26:57.029752+00:00

apr: integer overflow/wraparound in apr_encode httpd: mod_proxy_ajp: Possible request smuggling httpd: mod_proxy: HTTP response splitting mod_security: incorrect parsing of HTTP multipart requests leads to web application firewall bypass modsecurity: lacking the complete content in FILES_TMP_CONTENT leads to web application firewall bypass httpd: mod_proxy_uwsgi HTTP response splitting curl: use after free in SSH sha256 fingerprint check curl: IDN wildcard match may lead to Improper Cerificate Validation curl: more POST-after-PUT confusion

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-24963 UBUNTU-CVE-2022-24963 2026-10-03T13:26:57.029784+00:00

Affected: Ubuntu:22.04:LTS: apr

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0245 WID-SEC-W-2023-0245 — Apache Portable Runtime (APR): Mehrere Schwachstellen 2026-10-03T13:26:57.029801+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Apache Portable Runtime (APR) ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.