An out-of-bounds read vulnerability was found in httpd. A very large input to the ap_rputs and ap_rwrite functions can lead to an integer overflow and result in an out-of-bounds read.

References

bugzilla.redhat.com/show_bug.cgi?id=2095002

httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-28614

nvd.nist.gov/vuln/detail/CVE-2022-28614

www.cve.org/CVERecord?id=CVE-2022-28614

osv 8

ibm 12

f5 1

prion 1

httpd 1

ubuntucve 1

alpinelinux 1

cloudlinux 2

nessus 42

broadcom 1

debiancve 1

cve 1

oraclelinux 3

veracode 1

hackerone 1

cvelist 1

openvas 30

ubuntu 2

fedora 2

altlinux 2

slackware 1

amazon 2

redos 1

kaspersky 1

freebsd 1

rosalinux 1

photon 5

rocky 2

redhat 5

almalinux 2

gentoo 1

oracle 3

osv

CVE-2022-28614

2022-06-09 17:15:09

BIT-apache-2022-28614

2024-03-06 10:52:51

apache2 regression

2022-06-23 20:19:44

ibm

Security Bulletin: IBM Aspera Orchestrator affected by an Apache HTTP Server vulnerability (CVE-2022-28614)

2023-02-02 21:26:59

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use Mapping Assistance may be vulnerable to loss of confidentiality due to CVE-2022-28614

2022-11-07 11:20:14

Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to bypass security restrictions and obtain sensitive information due to multiple vulnerabilities.

2022-07-28 17:56:28

K58003591 : Apache HTTP server vulnerability CVE-2022-28614

2022-07-05 00:00:00

prion

Design/Logic Flaw

2022-06-09 17:15:00

httpd

Apache Httpd < 2.4.54 : read beyond bounds via ap_rwrite()

2022-06-08 00:00:00

ubuntucve

CVE-2022-28614

2022-06-09 00:00:00

alpinelinux

CVE-2022-28614

2022-06-09 17:15:00

cloudlinux

Fixed CVE-2022-28614 in httpd

2022-09-14 16:34:16

Fixed CVE-2022-28614 in httpd

2022-09-19 12:52:00

nessus

F5 Networks BIG-IP : Apache HTTP server vulnerability (K58003591)

2022-07-05 00:00:00

Oracle Linux 6 : httpd (ELSA-2022-9714)

2022-08-17 00:00:00

Apache 2.4.x < 2.4.54 Multiple Vulnerabilities

2022-06-08 00:00:00

broadcom

The ap_rwrite function in Apache HTTP Server 2.4.53 and earlier may read unintended memory

2023-08-01 00:00:00

debiancve

CVE-2022-28614

2022-06-09 17:15:00

cve

CVE-2022-28614

2022-06-09 17:15:00

oraclelinux

httpd security update

2022-08-17 00:00:00

httpd security, bug fix, and enhancement update

2022-11-22 00:00:00

httpd:2.4 security update

2022-11-15 00:00:00

veracode

Out-of-Bounds Read

2022-06-13 10:44:31

hackerone

Internet Bug Bounty: Read beyond bounds via ap_rwrite() [zhbug_httpd_47.2]

2022-06-08 23:34:50

cvelist

CVE-2022-28614 read beyond bounds via ap_rwrite()

2022-06-08 10:00:48

openvas

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2022-2270)

2022-08-18 00:00:00

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2022-2614)

2022-10-28 00:00:00

Apache HTTP Server < 2.4.54 Multiple Vulnerabilities - Linux

2022-06-10 00:00:00

ubuntu

Apache HTTP Server regression

2022-06-23 00:00:00

Apache HTTP Server regression

2022-06-23 00:00:00

fedora

[SECURITY] Fedora 36 Update: httpd-2.4.54-3.fc36

2022-07-01 01:09:46

[SECURITY] Fedora 35 Update: httpd-2.4.54-1.fc35

2022-07-06 01:54:10

altlinux

Security fix for the ALT Linux 10 package apache2 version 1:2.4.54-alt1

2022-06-21 00:00:00

Security fix for the ALT Linux 9 package apache2 version 1:2.4.54-alt1

2022-06-19 00:00:00

slackware

[slackware-security] httpd

2022-06-08 19:24:07

amazon

Medium: httpd

2022-07-06 03:12:00

Medium: httpd24

2022-06-30 23:38:00

redos

ROS-20220628-01

2022-06-28 00:00:00

kaspersky

KLA12554 Multiple vulnerabilities in Apache HTTP Server

2022-06-08 00:00:00

freebsd

Apache httpd -- Multiple vulnerabilities

2022-06-08 00:00:00

rosalinux

Advisory ROSA-SA-2023-2161

2023-05-03 11:17:19

photon

Critical Photon OS Security Update - PHSA-2022-0489

2022-06-22 00:00:00

Critical Photon OS Security Update - PHSA-2022-0202

2022-06-22 00:00:00

Critical Photon OS Security Update - PHSA-2022-0409

2022-06-23 00:00:00

rocky

httpd:2.4 security update

2022-11-08 06:25:28

httpd security, bug fix, and enhancement update

2022-11-15 06:14:59

redhat

(RHSA-2022:7647) Moderate: httpd:2.4 security update

2022-11-08 06:25:28

(RHSA-2022:8067) Moderate: httpd security, bug fix, and enhancement update

2022-11-15 06:14:59

(RHSA-2022:6753) Moderate: httpd24-httpd security and bug fix update

2022-09-29 13:20:41

almalinux

Moderate: httpd:2.4 security update

2022-11-08 00:00:00

Moderate: httpd security, bug fix, and enhancement update

2022-11-15 00:00:00

gentoo

Apache HTTPD: Multiple Vulnerabilities

2022-08-14 00:00:00

oracle

Oracle Critical Patch Update Advisory - January 2023

2023-01-17 00:00:00

Oracle Critical Patch Update Advisory - October 2022

2022-10-18 00:00:00

Oracle Critical Patch Update Advisory - April 2023

2023-04-18 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

0.003 Low

EPSS

Percentile

71.6%

JSON

Related for RH:CVE-2022-28614