A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.

The remote host is affected by the vulnerability described in GLSA-202305-20 (libapreq2: Buffer Overflow)

  - A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing     multipart form uploads. A remote attacker could send a request causing a process crash which could lead to     a denial of service attack. (CVE-2022-22728)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3269 advisory.

  - A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing     multipart form uploads. A remote attacker could send a request causing a process crash which could lead to     a denial of service attack. (CVE-2022-22728)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of libapreq2 installed on the remote host is prior to 2.13-38.3. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1637 advisory.

  - A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing     multipart form uploads. A remote attacker could send a request causing a process crash which could lead to     a denial of service attack. (CVE-2022-22728)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
175062	GLSA-202305-20 : libapreq2: Buffer Overflow	Nessus	Gentoo Local Security Checks	high
170053	Debian DLA-3269-1 : libapreq2 - LTS security update	Nessus	Debian Local Security Checks	high
165988	Amazon Linux AMI : libapreq2 (ALAS-2022-1637)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2022-22728

high

Tenable Plugins

high

high

high