CVE-2022-28331 Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function

🗓️ 31 Jan 2023 15:55:21Reported by apacheType

CVE-2022-28331 Apache Portable Runtime (APR) Windows out-of-bounds writ

Reporter	Title	Published	Views	Family All 34
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM HTTP Server affect WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On	9 Mar 202302:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to multiple vulnerabilities due to the included Apache HTTP Server and Apache Portable Runtime	28 Feb 202301:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring included WebSphere Application Server and IBM HTTP Server used by WebSphere Application Server	30 Mar 202318:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.9	15 Apr 202502:49	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server (CVE-2022-28331, CVE-2022-36760, CVE-2022-37436, CVE-2022-25147, CVE-2006-20001)	2 Mar 202320:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities has been identified in IBM HTTP Server shipped with IBM Rational ClearCase [CVE-2022-28331, CVE-2022-36760, CVE-2022-37436, CVE-2022-25147, CVE-2006-20001]	3 Mar 202306:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in apr 1.7.0-12.el9_3	8 Jul 202507:00	–	ibm
AlpineLinux	CVE-2022-28331	31 Jan 202315:55	–	alpinelinux
BDU FSTEC	The vulnerability of the apr_socket_sendv() function in the Apache Portable Runtime (APR) library on Windows operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.	13 Feb 202300:00	–	bdu_fstec
CNNVD	Apache Portable Runtime 输入验证错误漏洞	31 Jan 202300:00	–	cnnvd

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Portable Runtime (APR)",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "1.7.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/5pfdfn7h0vsdo5xzjn97vghp0x42jj2r

07 Jul 2023 15:26Current

9.7High risk

Vulners AI Score9.7

EPSS0.01575

CWE-190