Apache mod_lua buffer overflow (CVE-2022-22719)

Summary

A vulnerability in r:parsebody leads to memory corruption in mod_lua.

Vulnerability ID	Vulnerability Overview
CVE-2022-22719	A crafted request body sent to a Lua script using the r:parsebody() function can trigger a heap-based buffer overflow.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/09/2026	Initial release

Back to Security Notices