CVE-2022-28331 Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function
CriticalCVSS 9.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Portable Runtime (APR) | <= 1.7.0 | No fix listed |
| apache portable runtime | <= 1.7.0 | No fix listed |
| alpine/apr(Alpine:v3.14) | < 1.7.1-r0 | 1.7.1-r0 |
| alpine/apr(Alpine:v3.15) | < 1.7.1-r0 | 1.7.1-r0 |
| alpine/apr(Alpine:v3.16) | < 1.7.1-r0 | 1.7.1-r0 |
| alpine/apr(Alpine:v3.17) | < 1.7.1-r0 | 1.7.1-r0 |
| alpine/apr(Alpine:v3.18) | < 1.7.1-r0 | 1.7.1-r0 |
| alpine/apr(Alpine:v3.19) | < 1.7.1-r0 | 1.7.1-r0 |
| alpine/apr(Alpine:v3.20) | < 1.7.1-r0 | 1.7.1-r0 |
| alpine/apr(Alpine:v3.21) | < 1.7.1-r0 | 1.7.1-r0 |
| alpine/apr(Alpine:v3.22) | < 1.7.1-r0 | 1.7.1-r0 |
| alpine/apr(Alpine:v3.23) | < 1.7.1-r0 | 1.7.1-r0 |
| alpine/apr(Alpine:v3.24) | < 1.7.1-r0 | 1.7.1-r0 |
References
- lists.apache.org mailing-list vendor-advisory
- security.alpinelinux.org vendor-advisory
- Debian Security Tracker CVE-2022-28331 vendor-advisory