Lucene search

K
mageiaGentoo FoundationMGASA-2023-0063
HistoryFeb 27, 2023 - 11:27 p.m.

Updated apr packages fix security vulnerability

2023-02-2723:27:16
Gentoo Foundation
advisories.mageia.org
30
apache portable runtime
integer overflow
vulnerability
security fix
unix

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.084

Percentile

94.5%

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. (CVE-2022-24963)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchapr< 1.7.2-1apr-1.7.2-1.mga8

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.084

Percentile

94.5%