---
cve: "CVE-2022-22728"
severity: "LOW"
cvss: 3.1
epss: "5.8%"
vendor: "Apache Software Foundation"
kev: false
exploited: false
published: "2022-08-25 15:15:08"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-10T12:24:03+02:00"
---

# CVE-2022-22728

> 3.1 LOW

## Beschreibung

A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.

## Referenzen

- <https://lists.apache.org/thread/2fsjoor96d47vtkpf76x4yo06nccvy1y>
- <http://www.openwall.com/lists/oss-security/2022/08/25/4>
- <http://www.openwall.com/lists/oss-security/2022/08/25/3>
- <http://www.openwall.com/lists/oss-security/2022/08/26/4>
- <https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PUUS3JL44UUSLJTSXE46HVKZIW7E7PE/>
- <https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BE5MEHGIQUEIISBCVHM43IN2NBDXBFOJ/>
- <https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3HZZKVHYYWACPWONPEFRNPIRE3HYLV4T/>
- <http://www.openwall.com/lists/oss-security/2022/12/29/1>
- <http://www.openwall.com/lists/oss-security/2022/12/30/4>
- <http://www.openwall.com/lists/oss-security/2022/12/31/1>
- <http://www.openwall.com/lists/oss-security/2022/12/31/5>
- <http://www.openwall.com/lists/oss-security/2023/01/02/1>
- <http://www.openwall.com/lists/oss-security/2023/01/02/2>
- <http://www.openwall.com/lists/oss-security/2023/01/03/2>
- <https://lists.debian.org/debian-lts-announce/2023/01/msg00009.html>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2022-22728) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_