CVE-2022-28331

🗓️ 31 Jan 2023 15:55:21Reported by apacheType

Windows Apache Portable Runtime 1.7.0 stack buffer overflo

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM HTTP Server affect WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On	9 Mar 202302:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to multiple vulnerabilities due to the included Apache HTTP Server and Apache Portable Runtime	28 Feb 202301:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring included WebSphere Application Server and IBM HTTP Server used by WebSphere Application Server	30 Mar 202318:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.9	15 Apr 202502:49	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server (CVE-2022-28331, CVE-2022-36760, CVE-2022-37436, CVE-2022-25147, CVE-2006-20001)	2 Mar 202320:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities has been identified in IBM HTTP Server shipped with IBM Rational ClearCase [CVE-2022-28331, CVE-2022-36760, CVE-2022-37436, CVE-2022-25147, CVE-2006-20001]	3 Mar 202306:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in apr 1.7.0-12.el9_3	8 Jul 202507:00	–	ibm
AlpineLinux	CVE-2022-28331	31 Jan 202315:55	–	alpinelinux
CNNVD	Apache Portable Runtime 输入验证错误漏洞	31 Jan 202300:00	–	cnnvd
CNVD	Apache Portable Runtime Out-of-Bounds Write Vulnerability (CNVD-2023-57670)	6 Feb 202300:00	–	cnvd

NVD

Vulners

Node

apache portable_runtimeRange≤1.7.0

AND

microsoft windowsMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Portable Runtime (APR)",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "1.7.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/5pfdfn7h0vsdo5xzjn97vghp0x42jj2r

27 Mar 2025 15:15Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.8

EPSS0.00303

SSVC

CWE-190