Oracle Linux: CVE-2022-24963: ELSA-2023-7711: apr security update (MODERATE) (Multiple Advisories)

Oracle Linux: CVE-2022-24963: ELSA-2023-7711:apr security update (MODERATE) (Multiple Advisories)

Severity

6

CVSS

(AV:N/AC:L/Au:N/C:N/I:P/A:P)

Published

01/31/2023

Created

12/14/2023

Added

12/12/2023

Modified

01/07/2025

Description

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0. A flaw was found in Apache Portable Runtime (APR). This issue may allow a malicious attacker to write beyond the bounds of a buffer.

Solution(s)

• oracle-linux-upgrade-apr
• oracle-linux-upgrade-apr-devel

References

• https://attackerkb.com/topics/cve-2022-24963
• CVE - 2022-24963
• ELSA-2023-7711