Re: CVE-2022-22728: libapreq2: libapreq2 multipart form parse memory corruption

[Alex Gaynor <alex.gaynor () gmail com>]

Is this a READ or WRITE buffer overflow?

Thanks,
Alex

On Thu, Aug 25, 2022 at 3:52 PM Joe Orton <jorton () apache org> wrote:
> Severity: important
>
> Description:
>
> A flaw in libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads.  
> A remote attacker could send a request causing a process crash which could lead to a denial of service attack.


-- 
All that is necessary for evil to succeed is for good people to do nothing.