CVE-2022-22728 libapreq2 multipart form parse memory corruption

🗓️ 25 Aug 2022 00:00:00Reported by apacheType

Apache libapreq2 buffer overflow in multipart form pars

Reporter	Title	Published	Views	Family All 29
ATTACKERKB	CVE-2022-22728	25 Aug 202215:15	–	attackerkb
Amazon	Important: libapreq2	11 Oct 202200:00	–	amazon
Tenable Nessus	Amazon Linux AMI : libapreq2 (ALAS-2022-1637)	10 Oct 202200:00	–	nessus
Tenable Nessus	Debian dla-3269 : libapache2-mod-apreq2 - security update	14 Jan 202300:00	–	nessus
Tenable Nessus	GLSA-202305-20 : libapreq2: Buffer Overflow	3 May 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2022-22728	18 Aug 202500:00	–	nessus
CNNVD	libapreq2 授权问题漏洞	25 Aug 202200:00	–	cnnvd
CVE	CVE-2022-22728	25 Aug 202200:00	–	cve
Debian	[SECURITY] [DLA 3269-1] libapreq2 security update	14 Jan 202316:07	–	debian
Debian CVE	CVE-2022-22728	25 Aug 202200:00	–	debiancve

[
  {
    "vendor": "Apache Software Foundation",
    "product": "libapreq2",
    "versions": [
      {
        "version": "unspecified",
        "lessThanOrEqual": "2.16",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2023/01/02/2
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3HZZKVHYYWACPWONPEFRNPIRE3HYLV4T/
openwall	www.openwall.com/lists/oss-security/2023/01/03/2
openwall	www.openwall.com/lists/oss-security/2022/08/26/4
openwall	www.openwall.com/lists/oss-security/2022/12/31/1
openwall	www.openwall.com/lists/oss-security/2022/12/29/1
lists	www.lists.apache.org/thread/2fsjoor96d47vtkpf76x4yo06nccvy1y
openwall	www.openwall.com/lists/oss-security/2022/08/25/3
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PUUS3JL44UUSLJTSXE46HVKZIW7E7PE/
openwall	www.openwall.com/lists/oss-security/2022/12/30/4

03 May 2023 00:00Current

7.7High risk

Vulners AI Score7.7

EPSS0.20249

CWE-120