Not rated
CVE-2022-24963 Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker…
Description
Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Portable Runtime (APR) | 1.7.0 | No fix stated |
References
- lists.apache.org lists.apache.org
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of Apache Portable Runtime (APR)
The 4 CVEs of Apache Portable Runtime (APR) →
CVE-2023-49582
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to…
Not rated
CVE-2022-28331
On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in…
Not rated
CVE-2021-35940
An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release…
Not rated