MGASA-2023-0123
- Source
- https://advisories.mageia.org/MGASA-2023-0123.html
- Import Source
- https://advisories.mageia.org/MGASA-2023-0123.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2023-0123
- Related
- Published
- 2023-04-06T21:20:12Z
- Modified
- 2023-04-06T20:14:30Z
- Summary
- Updated libapreq2 packages fix security vulnerability
- Details
-
A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack. (CVE-2022-22728)
- References
-
- https://advisories.mageia.org/MGASA-2023-0123.html
- https://bugs.mageia.org/show_bug.cgi?id=30778
- https://www.openwall.com/lists/oss-security/2022/08/25/3
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2PUUS3JL44UUSLJTSXE46HVKZIW7E7PE/
- https://www.openwall.com/lists/oss-security/2023/01/02/2
- https://www.debian.org/lts/security/2023/dla-3269
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:8 / libapreq2
Package
- Name
- libapreq2
- Purl
- pkg:rpm/mageia/libapreq2?arch=source&distro=mageia-8