Not rated
CVE-2022-22728 A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form…
Description
A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libapreq2 2.16 | earliest → 2.16 | No fix stated |
References
- lists.apache.org lists.apache.org
- [oss-security] 20220825 Re: CVE-2022-22728: libapreq2: libapreq2 multipart form parse memory corruption www.openwall.com
- [oss-security] 20220825 CVE-2022-22728: libapreq2: libapreq2 multipart form parse memory corruption www.openwall.com
- [oss-security] 20220826 Re: CVE-2022-22728: libapreq2: libapreq2 multipart form parse memory corruption www.openwall.com
- FEDORA-2022-9e5046934e lists.fedoraproject.org
- FEDORA-2022-cf658a432f lists.fedoraproject.org
- FEDORA-2022-61f5b492b7 lists.fedoraproject.org
- [oss-security] 20221229 Re: CVE-2022-22728: libapreq2: libapreq2 multipart form parse memory corruption www.openwall.com
- [oss-security] 20221230 Re: CVE-2022-22728: libapreq2: libapreq2 multipart form parse memory corruption www.openwall.com
- [oss-security] 20221231 Re: CVE-2022-22728: libapreq2: libapreq2 multipart form parse memory corruption www.openwall.com
- [oss-security] 20221231 Re: CVE-2022-22728: libapreq2: libapreq2 multipart form parse memory corruption www.openwall.com
- [oss-security] 20230102 Re: CVE-2022-22728: libapreq2: libapreq2 multipart form parse memory corruption www.openwall.com
- [oss-security] 20230102 Re: CVE-2022-22728: libapreq2: libapreq2 multipart form parse memory corruption www.openwall.com
- [oss-security] 20230103 Re: CVE-2022-22728: libapreq2: libapreq2 multipart form parse memory corruption www.openwall.com
- [debian-lts-announce] 20230114 [SECURITY] [DLA 3269-1] libapreq2 security update lists.debian.org
- GLSA-202305-20 security.gentoo.org
Timeline
- Published
- Last modified