PT-2023-8451
CVE-2022-24963
·
تاريخ النشر
2023-01-31
·
تاريخ التحديث
2026-10-31
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Apache Portable Runtime (APR) version 1.7.0
Description
The issue is related to an Integer Overflow or Wraparound vulnerability in the
apr encode functions of Apache Portable Runtime (APR), allowing an attacker to write beyond the bounds of a buffer. This can potentially enable a remote attacker to execute arbitrary code.Recommendations
For Apache Portable Runtime (APR) version 1.7.0, update to a version that fixes the Integer Overflow or Wraparound vulnerability in the
apr encode functions.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾