CVE-2022-28331

Published: Jan 31, 2023

Modified: Mar 27, 2025

PUBLISHED

Description

On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer overflow.

Vendor	Product	Versions
Apache Software Foundation	Apache Portable Runtime (APR)	affected `0 - <= 1.7.0`

Weaknesses (CWE)

CWE-190

References

https://lists.apache.org/thread/5pfdfn7h0vsdo5xzjn97vghp0x42jj2r

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2022-28331

Description

Affected Products

Weaknesses (CWE)

References