Catálogo de CVE

CVE-2022-28330

apache2 affected and fixed versions

Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the mod_isapi module.

Gravedad: High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Published: Jun 7, 2022, 10:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 3.82% · Oct 27, 2026

Projects and upstream resources

[apache2][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiantrixie-security	apache2	`2.4.69-1~deb13u1`	Not affected	[CVE-2022-28330]
Debiantrixie	apache2	Not reported	Not affectedDistribution reports not affected	[CVE-2022-28330]
Debiantrixie	apache2	`2.4.68-1~deb13u1`	Not affected	[CVE-2022-28330]
Debiansid	apache2	Not reported	Not affectedDistribution reports not affected	[CVE-2022-28330]
Debiansid	apache2	`2.4.69-1`	Not affected	[CVE-2022-28330]
Debianforky	apache2	Not reported	Not affectedDistribution reports not affected	[CVE-2022-28330]
Debianforky	apache2	`2.4.69-1`	Not affected	[CVE-2022-28330]
Debianbookworm-security	apache2	`2.4.67-1~deb12u3`	Not affected	[CVE-2022-28330]
Debianbookworm	apache2	Not reported	Not affectedDistribution reports not affected	[CVE-2022-28330]
Debianbookworm	apache2	`2.4.68-1~deb12u1`	Not affected	[CVE-2022-28330]
UnknownRelease not reported	apache2	Not reported	UnknownSource applicability is not established	Provider not reported

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	apache2	Not reported	UnknownSource applicability is not established	Provider not reported
Debianbookworm	apache2	Not reported	Not affectedDistribution reports not affected	[CVE-2022-28330]
Debianbookworm	apache2	`2.4.68-1~deb12u1`	Not affected	[CVE-2022-28330]
Debianbookworm-security	apache2	`2.4.67-1~deb12u3`	Not affected	[CVE-2022-28330]
Debianforky	apache2	Not reported	Not affectedDistribution reports not affected	[CVE-2022-28330]
Debianforky	apache2	`2.4.69-1`	Not affected	[CVE-2022-28330]
Debiansid	apache2	Not reported	Not affectedDistribution reports not affected	[CVE-2022-28330]
Debiansid	apache2	`2.4.69-1`	Not affected	[CVE-2022-28330]
Debiantrixie	apache2	Not reported	Not affectedDistribution reports not affected	[CVE-2022-28330]
Debiantrixie	apache2	`2.4.68-1~deb13u1`	Not affected	[CVE-2022-28330]
Debiantrixie-security	apache2	`2.4.69-1~deb13u1`	Not affected	[CVE-2022-28330]

Original provider fields

{
  "package_releases": [
    {
      "name": "apache2",
      "status": "not affected",
      "release": "sid",
      "version": "2.4.69-1"
    },
    {
      "name": "apache2",
      "status": "not affected",
      "release": "forky",
      "version": "2.4.69-1"
    },
    {
      "name": "apache2",
      "status": "not affected",
      "release": "trixie",
      "version": "2.4.68-1~deb13u1"
    },
    {
      "name": "apache2",
      "status": "not affected",
      "release": "trixie-security",
      "version": "2.4.69-1~deb13u1"
    },
    {
      "name": "apache2",
      "status": "not affected",
      "release": "bookworm",
      "version": "2.4.68-1~deb12u1"
    },
    {
      "name": "apache2",
      "status": "not affected",
      "release": "bookworm-security",
      "version": "2.4.67-1~deb12u3"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "apache2",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "apache2",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "apache2",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "apache2",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": "0"
    }
  ],
  "distribution_packages": [
    {
      "name": "apache2",
      "fixed_version": "0",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

La asociación de paquetes está en curso.

[Debian 12 (Bookworm)]

[apache2]Desconocido
Detalles (4)
- 2.4.68-1~deb12u1 · amd64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.68-1~deb12u1 · arm64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · amd64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · arm64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
[apache2-bin]Desconocido
Paquete fuente: [apache2]
Detalles (4)
- 2.4.68-1~deb12u1 · amd64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.68-1~deb12u1 · arm64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · amd64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · arm64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
[apache2-data]Desconocido
Paquete fuente: [apache2]
Detalles (4)
- 2.4.68-1~deb12u1 · all · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.68-1~deb12u1 · all · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · all · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · all · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
[apache2-dev]Desconocido
Paquete fuente: [apache2]
Detalles (4)
- 2.4.68-1~deb12u1 · amd64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.68-1~deb12u1 · arm64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · amd64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · arm64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
[apache2-doc]Desconocido
Paquete fuente: [apache2]
Detalles (4)
- 2.4.68-1~deb12u1 · all · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.68-1~deb12u1 · all · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · all · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · all · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
[apache2-ssl-dev]Desconocido
Paquete fuente: [apache2]
Detalles (4)
- 2.4.68-1~deb12u1 · amd64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.68-1~deb12u1 · arm64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · amd64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · arm64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
[apache2-suexec-custom]Desconocido
Paquete fuente: [apache2]
Detalles (4)
- 2.4.68-1~deb12u1 · amd64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.68-1~deb12u1 · arm64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · amd64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · arm64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
[apache2-suexec-pristine]Desconocido
Paquete fuente: [apache2]
Detalles (4)
- 2.4.68-1~deb12u1 · amd64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.68-1~deb12u1 · arm64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · amd64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · arm64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
[apache2-utils]Desconocido
Paquete fuente: [apache2]
Detalles (4)
- 2.4.68-1~deb12u1 · amd64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.68-1~deb12u1 · arm64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · amd64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · arm64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
[libapache2-mod-md]Desconocido
Paquete fuente: [apache2]
Detalles (4)
- 2.4.68-1~deb12u1 · amd64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.68-1~deb12u1 · arm64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · amd64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · arm64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
[libapache2-mod-proxy-uwsgi]Desconocido
Paquete fuente: [apache2]
Detalles (4)
- 2.4.68-1~deb12u1 · amd64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.68-1~deb12u1 · arm64 · bookworm
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · amd64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm
- 2.4.67-1~deb12u3 · arm64 · bookworm-security
  No afectada
  dsa · apache2 · debian · bookworm

Observado: Oct 28, 2026, 6:15:39 PM UTC

Referencias

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]