Wind River Support Network

HomeDefectsLIN1021-3744
Fixed

LIN1021-3744 : Security Advisory - apache2 - CVE-2022-28614

Created: Jun 8, 2022    Updated: Oct 26, 2022
Resolved Date: Oct 17, 2022
Found In Version: 10.21.20.1
Fix Version: 10.21.20.14
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using ap_rwrite() or ap_rputs(), such as with mod_luas r:puts() function.

https://nvd.nist.gov/vuln/detail/CVE-2022-28614

CVEs


Live chat
Online