CVE-2022-25147: apr-util: Integer Ov…” : Bugs : StarlingX

CVE-2022-25147: https://nvd.nist.gov/vuln/detail/CVE-2022-25147

Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.

Score:
cve_id status cvss3Score av ac pr ui ai
CVE-2022-25147 fixed 9.8 N L N N H

References:
[‘libaprutil1_1.6.1-5_amd64.deb===>libaprutil1_1.6.1-5+deb11u1_amd64.deb’, ‘libaprutil1-dbd-sqlite3_1.6.1-5_amd64.deb===>libaprutil1-dbd-sqlite3_1.6.1-5+deb11u1_amd64.deb’, ‘libaprutil1-ldap_1.6.1-5_amd64.deb===>libaprutil1-ldap_1.6.1-5+deb11u1_amd64.deb’]