Most recent entries from all

ALSA-2023:7711 — Moderate: apr security update

Affected: AlmaLinux:9: apr, AlmaLinux:9: apr-devel

The Apache Portable Runtime (APR) is a portability library used by the Apache HTTP Server and other projects. It provides a free library of C data structures and routines.

Security Fix(es):

* apr: integer overflow/wraparound in apr_encode (CVE-2022-24963)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-00850

Withdrawn: BELL-CVE-2022-24963 — CVE-2022-24963 does not affect BellSoft software

Withdrawn by the publisher.

BIT-apr-2022-24963 — Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions

Affected: Bitnami: apr

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.

cnvd-2023-57672

EUVD-2026-225624

fkie_cve-2022-24963

GHSA-6rr3-mpxq-hv4x

gsd-2022-24963

msrc_CVE-2022-24963 — Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions

msrc_CVE-2022-24963

OESA-2023-1095 — apr security update

Affected: openEuler:20.03-LTS-SP1: apr

The mission of the Apache Portable Runtime (APR) project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of predictable if not identical behaviour regardless of the platform on which their software is built, relieving them of the need to code special-case conditions to work around or take advantage of platform-specific deficiencies or features. Security Fix(es): Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.(CVE-2022-24963)

openSUSE-SU-2024:12655-1 — apr-devel-1.7.2-1.1 on GA media

apr-devel-1.7.2-1.1 on GA media

RHSA-2023:4629 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 security update

apr: integer overflow/wraparound in apr_encode httpd: mod_proxy_ajp: Possible request smuggling httpd: mod_proxy: HTTP response splitting mod_security: incorrect parsing of HTTP multipart requests leads to web application firewall bypass modsecurity: lacking the complete content in FILES_TMP_CONTENT leads to web application firewall bypass httpd: mod_proxy_uwsgi HTTP response splitting curl: use after free in SSH sha256 fingerprint check curl: IDN wildcard match may lead to Improper Cerificate Validation curl: more POST-after-PUT confusion

UBUNTU-CVE-2022-24963

Affected: Ubuntu:22.04:LTS: apr

WID-SEC-W-2023-0245 — Apache Portable Runtime (APR): Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in Apache Portable Runtime (APR) ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.