CVE-2022-24963 — Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions

CVE-2022-24963

Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions PUBLISHED

Description (CNA)

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Portable Runtime (APR)	affected 1.7.0

CWE

CWE-190

References

https://lists.apache.org/thread/fw9p6sdncwsjkstwc066vz57xqzfksq9
https://security.netapp.com/advisory/ntap-20230908-0008/

ADP enrichment

CVE

No English description supplied.

https://lists.apache.org/thread/fw9p6sdncwsjkstwc066vz57xqzfksq9
https://security.netapp.com/advisory/ntap-20230908-0008/

CISA-ADP

No English description supplied.

No references supplied.