Vulnerability · Published Jan 31, 2023 · Assigned by apache
CVE-2022-28331Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function
Critical 9.8
In plain English
A critical-severity integer overflow in Apache Portable Runtime (APR) from Apache Software Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 76% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.6%top 24.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer overflow.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.20 | apr | 1.7.1-r0 | ALPINE-CVE-2022-28331 |
| Alpine:v3.21 | apr | 1.7.1-r0 | ALPINE-CVE-2022-28331 |
| Alpine:v3.22 | apr | 1.7.1-r0 | ALPINE-CVE-2022-28331 |
| Alpine:v3.23 | apr | 1.7.1-r0 | ALPINE-CVE-2022-28331 |
| Alpine:v3.24 | apr | 1.7.1-r0 | ALPINE-CVE-2022-28331 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Apache Portable Runtime (APR) | 0 – through 1.7.0 |
Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://lists.apache.org/thread/5pfdfn7h0vsdo5xzjn97vghp0x42jj2r vendor-advisory