Red Hat Security AdvisoryRHSA-2023:3380
apr-util security update
Released 2023-05-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) apr-util-1.6.1-6.el8_2.1, apr-util-bdb-1.6.1-6.el8_2.1, apr-util-devel-1.6.1-6.el8_2.1 +6
- Red Hat Enterprise Linux AppStream E4S (v. 8.2) apr-util-1.6.1-6.el8_2.1, apr-util-bdb-1.6.1-6.el8_2.1, apr-util-devel-1.6.1-6.el8_2.1 +6
- Red Hat Enterprise Linux AppStream TUS (v. 8.2) apr-util-1.6.1-6.el8_2.1, apr-util-bdb-1.6.1-6.el8_2.1, apr-util-devel-1.6.1-6.el8_2.1 +6
Fixes 1 record
Priority LOW 32
Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01429 · Published 2023-01-31 · Partial fix CWE-190
