USN-7038-1: APR vulnerability

Published Sep 26, 2024
·
Updated

Thomas Stangner discovered a permission vulnerability in the Apache Portable Runtime (APR) library. A local attacker could possibly use this issue to read named shared memory segments, potentially exposing sensitive application data.

Affected Software

20 affected componentsFixes available
All of the following
ubuntu/libapr1-dev<1.7.2-3.1ubuntu0.1
1.7.2-3.1ubuntu0.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/libapr1t64<1.7.2-3.1ubuntu0.1
1.7.2-3.1ubuntu0.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/libapr1<1.7.0-8ubuntu0.22.04.2
1.7.0-8ubuntu0.22.04.2
Ubuntu Ubuntu=22.04
All of the following
ubuntu/libapr1-dev<1.7.0-8ubuntu0.22.04.2
1.7.0-8ubuntu0.22.04.2
Ubuntu Ubuntu=22.04
All of the following
ubuntu/libapr1<1.6.5-1ubuntu1.1
1.6.5-1ubuntu1.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/libapr1-dev<1.6.5-1ubuntu1.1
1.6.5-1ubuntu1.1
Ubuntu Ubuntu=20.04
All of the following
ubuntu/libapr1<1.6.3-2ubuntu0.1~esm1
1.6.3-2ubuntu0.1~esm1
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libapr1-dev<1.6.3-2ubuntu0.1~esm1
1.6.3-2ubuntu0.1~esm1
Ubuntu Ubuntu=18.04
All of the following
ubuntu/libapr1<1.5.2-3ubuntu0.1~esm2
1.5.2-3ubuntu0.1~esm2
Ubuntu Ubuntu=16.04
All of the following
ubuntu/libapr1-dev<1.5.2-3ubuntu0.1~esm2
1.5.2-3ubuntu0.1~esm2
Ubuntu Ubuntu=16.04

Event History

Sep 26, 2024
Advisory Published
via Ubuntu·12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of USN-7038-1?

The severity of USN-7038-1 is categorized as a permission vulnerability that may allow local attackers to access sensitive application data.

2

How do I fix USN-7038-1?

To fix USN-7038-1, ensure that you update the affected packages to the latest versions specified for your Ubuntu version.

3

Which packages are affected by USN-7038-1?

The affected packages by USN-7038-1 include libapr1, libapr1-dev, and libapr1t64 on various versions of Ubuntu.

4

Can USN-7038-1 be exploited remotely?

No, USN-7038-1 is a local privilege escalation vulnerability that requires local access to be exploited.

5

What versions of Ubuntu are impacted by USN-7038-1?

Ubuntu versions 16.04, 18.04, 20.04, 22.04, and 24.04 are impacted by USN-7038-1.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203