Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-28331

Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apache

Description

On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Portable Runtime (APR)

Default version status: unaffected

  • 0 to ≤ 1.7.0affected

References