CVE-2022-22728

Description

A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.

Affected Platforms

Weakness Type

CWE-120, CWE-120

References

• http://www.openwall.com/lists/oss-security/2022/08/25/3
• http://www.openwall.com/lists/oss-security/2022/08/25/4
• http://www.openwall.com/lists/oss-security/2022/08/26/4
• http://www.openwall.com/lists/oss-security/2022/12/29/1
• http://www.openwall.com/lists/oss-security/2022/12/30/4
• http://www.openwall.com/lists/oss-security/2022/12/31/1