CVE-2022-24963

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime (APR) version 1.7.0

Description The issue is related to an Integer Overflow or Wraparound vulnerability in the apr encode functions of Apache Portable Runtime (APR), allowing an attacker to write beyond the bounds of a buffer. This can potentially enable a remote attacker to execute arbitrary code.

Recommendations For Apache Portable Runtime (APR) version 1.7.0, update to a version that fixes the Integer Overflow or Wraparound vulnerability in the apr encode functions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.