9.8
CVSSv3

CVE-2022-28331

Published: 31/01/2023 Updated: 07/07/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

On Windows, Apache Portable Runtime 1.7.0 and previous versions may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer overflow.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apache portable_runtime

Vendor Advisories

Synopsis Moderate: Red Hat JBoss Web Server 574 release and security update Type/Severity Security Advisory: Moderate Topic Red Hat JBoss Web Server 574 zip release is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Windows ServerRed Hat Product Security has rated this release as ...
Synopsis Moderate: Red Hat JBoss Core Services Apache HTTP Server 2457 security update Type/Severity Security Advisory: Moderate Topic Red Hat JBoss Core Services Apache HTTP Server 2457 is now availableRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) bas ...
Multiple vulnerabilities have been found in Hitachi Configuration Manager and Hitachi Ops Center API Configuration Manager CVE-2022-25147, CVE-2022-28331 Affected products and versions are listed below Please upgrade your version to the appropriate version ...
A vulnerability (CVE-2022-28331) exists in Cosminexus HTTP Server and Hitachi Web Server Affected products and versions are listed below Please upgrade your version to the appropriate version ...