Wind River Support Network

HomeDefectsLIN10-10187
Fixed

LIN10-10187 : Security Advisory - apache2 - CVE-2022-28614

Created: Jun 8, 2022    Updated: Jun 28, 2022
Resolved Date: Jun 24, 2022
Found In Version: 10.17.41.1
Fix Version: 10.17.41.27
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using ap_rwrite() or ap_rputs(), such as with mod_luas r:puts() function.

https://nvd.nist.gov/vuln/detail/CVE-2022-28614

CVEs


Live chat
Online