CVE-2022-25147 in Financial Services Trade-Based Anti Money Laundering Enterprise Edition

Résumé (Anglaise)

Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Réserver

14/02/2022

Divulgation

31/01/2023

Statut

Confirmé

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
251143	Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition Platform buffer overflow	190	Non défini	Correctif officiel	CVE-2022-25147
251141	Oracle Financial Services Behavior Detection Platform Application buffer overflow	190	Non défini	Correctif officiel	CVE-2022-25147
242542	Oracle Communications Diameter Signaling Router Platform déni de service	404	Non défini	Correctif officiel	CVE-2022-25147
234601	Oracle Communications Diameter Signaling Router Virtual Network Function Manager buffer overflow	190	Non défini	Correctif officiel	CVE-2022-25147
219854	Apache Portable Runtime Utility apr_base64 buffer overflow	190	Non défini	Non défini	CVE-2022-25147

Sources

• MITRE
• NVD
• CVE Details