Wind River Support Network

HomeDefectsLIN1018-9359
Fixed

LIN1018-9359 : Security Advisory - apache2 - CVE-2022-28614

Created: Jun 8, 2022    Updated: Nov 2, 2022
Resolved Date: Jul 3, 2022
Found In Version: 10.18.44.1
Fix Version: 10.18.44.27
Severity: Standard
Applicable for: Wind River Linux LTS 18
Component/s: Userspace

Description

The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using ap_rwrite() or ap_rputs(), such as with mod_luas r:puts() function.

https://nvd.nist.gov/vuln/detail/CVE-2022-28614

CVEs


Live chat
Online