Published: 25/08/2022 Updated: 07/11/2023

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 0

A flaw in Apache libapreq2 versions 2.16 and previous versions could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache libapreq2
fedoraproject fedora 35
fedoraproject fedora 36
fedoraproject fedora 37
debian debian linux 10.0

Debian Bug report logs - #1018191 libapreq2: CVE-2022-22728: multipart form parse memory corruption Package: src:libapreq2; Maintainer for src:libapreq2 is Steinar H Gunderson <sesse@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 26 Aug 2022 19:09:02 UTC Severity: important Tags: secur ...

A flaw in Apache libapreq2 versions 216 and earlier could cause a buffer overflow while processing multipart form uploads A remote attacker could send a request causing a process crash which could lead to a denial of service attack (CVE-2022-22728) ...

CWE-120 https://lists.apache.org/thread/2fsjoor96d47vtkpf76x4yo06nccvy1y http://www.openwall.com/lists/oss-security/2022/08/25/4 http://www.openwall.com/lists/oss-security/2022/08/25/3 http://www.openwall.com/lists/oss-security/2022/08/26/4 http://www.openwall.com/lists/oss-security/2022/12/29/1 http://www.openwall.com/lists/oss-security/2022/12/30/4 http://www.openwall.com/lists/oss-security/2022/12/31/1 http://www.openwall.com/lists/oss-security/2022/12/31/5 http://www.openwall.com/lists/oss-security/2023/01/02/1 http://www.openwall.com/lists/oss-security/2023/01/02/2 http://www.openwall.com/lists/oss-security/2023/01/03/2 https://lists.debian.org/debian-lts-announce/2023/01/msg00009.html https://security.gentoo.org/glsa/202305-20 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PUUS3JL44UUSLJTSXE46HVKZIW7E7PE/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BE5MEHGIQUEIISBCVHM43IN2NBDXBFOJ/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3HZZKVHYYWACPWONPEFRNPIRE3HYLV4T/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1018191 https://nvd.nist.gov https://alas.aws.amazon.com/ALAS-2022-1637.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-22728

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect