Most recent entries from all

2NGA002579 — ABB Arctic communication solution ARM600 Vulnerabilities

ABB is aware of public reports of a vulnerabilities in product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could cause the product to stop, make the product inacces-sible, take remote control of the product or insert and run arbitrary code. As part of ABB product lifecycle policy, once a product transitions to end-of-life, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document, such as using a private APN cellular network between Arctic wireless gateways and ARM600 for establishing VPN tunnels, to mitigate security risks and avoid potential vulnerabilities. As part of ABB product lifecycle policy, once a product transitions to Limited state, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document to mitigate security risks.

ALSA-2023:3109 — Important: apr-util security update

Affected: AlmaLinux:8: apr-util, AlmaLinux:8: apr-util-bdb, AlmaLinux:8: apr-util-devel, AlmaLinux:8: apr-util-ldap, AlmaLinux:8: apr-util-mysql, AlmaLinux:8: apr-util-odbc, AlmaLinux:8: apr-util-openssl, AlmaLinux:8: apr-util-pgsql, AlmaLinux:8: apr-util-sqlite

The Apache Portable Runtime (APR) is a portability library used by the Apache HTTP Server and other projects. apr-util is a library which provides additional utility interfaces for APR; including support for XML parsing, LDAP, database interfaces, URI parsing, and more.

Security Fix(es):

* apr-util: out-of-bounds writes in the apr_base64 (CVE-2022-25147)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-02969

Withdrawn: BELL-CVE-2022-25147 — CVE-2022-25147 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2023-avi-0188 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2023-avi-0188

cnvd-2023-57671

EUVD-2026-216016

fkie_cve-2022-25147

Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer.

This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.

GHSA-37mv-q3x5-3mwg

Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.

gsd-2022-25147

ICSA-25-105-08 — ABB M2M Gateway

msrc_CVE-2022-25147 — Apache Portable Runtime Utility (APR-util): out-of-bounds writes in the apr_base64 family of functions

msrc_CVE-2022-25147

OESA-2023-1105 — apr-util security update

Affected: openEuler:20.03-LTS-SP1: apr-util, openEuler:20.03-LTS-SP3: apr-util, openEuler:22.03-LTS: apr-util

The mission of the Apache Portable Runtime (APR) project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of predictable if not identical behaviour regardless of the platform on which their software is built, relieving them of the need to code special-case conditions to work around or take advantage of platform-specific deficiencies or features. Security Fix(es): Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.(CVE-2022-25147)

openSUSE-SU-2024:12656-1 — apr-util-devel-1.6.3-1.1 on GA media

apr-util-devel-1.6.3-1.1 on GA media

RHSA-2023:3146 — Red Hat Security Advisory: apr-util security update

apr-util: out-of-bounds writes in the apr_base64

SUSE-SU-2023:0324-1 — Security update for apr-util

Security update for apr-util

UBUNTU-CVE-2022-25147

Affected: Ubuntu:Pro:14.04:LTS: apr-util, Ubuntu:Pro:16.04:LTS: apr-util, Ubuntu:18.04:LTS: apr-util, Ubuntu:20.04:LTS: apr-util, Ubuntu:22.04:LTS: apr-util

WID-SEC-W-2023-0245 — Apache Portable Runtime (APR): Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in Apache Portable Runtime (APR) ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.