Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Apache HTTP Server Integer Overflow or Wraparound Vulnerability - CVE-2022-28615 - Vulnerability Database
Apache HTTP Server

Apache HTTP Server Integer Overflow or Wraparound Vulnerability - CVE-2022-28615

Critical
Reference: CVE-2022-28615
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-28615
Title: Apache HTTP Server Integer Overflow or Wraparound Vulnerability
Overview:

Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call third-party modules or lua scripts that use ap_strcmp_match() may hypothetically be affected.