CVE-2022-28331
Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function
Summary
Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function
Original description
The description as published by the source.
On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer overflow.
Affected packages
Bitnami
apr
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.7.1"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2022-28331 apr Fixed in: 1.7.1-r0
References
- advisory lists.apache.org
- advisory nvd.nist.gov
- advisory github.com