Apache Portable Runtime (APR)

2 results · Clear filters · Feed

• Critical 9.8
  CVE-2022-28331

  Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function

  On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer overflow.

  Apache Software Foundation Apache Portable Runtime (APR) apr Alpine
  Jan 31, 2023
• Critical 9.8
  CVE-2022-24963

  Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions

  Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.

  Apache Software Foundation Apache Portable Runtime (APR) apr apr Debian Ubuntu Alpine
  Jan 31, 2023