Alma Linux: CVE-2022-24963: Moderate: apr security update (ALSA-2023-7711)

Alma Linux: CVE-2022-24963: Moderate: apr security update (ALSA-2023-7711)

Severity

10

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

01/31/2023

Created

12/13/2023

Added

12/12/2023

Modified

01/28/2025

Description

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.

Solution(s)

• alma-upgrade-apr
• alma-upgrade-apr-devel

References

• https://attackerkb.com/topics/cve-2022-24963
• CVE - 2022-24963
• https://errata.almalinux.org/9/ALSA-2023-7711.html