Apache LimitXMLRequestBody buffer overflow (CVE-2022-22721)

Summary

An integer overflow with oversized XML payloads can lead to denial of service.

Vulnerability ID	Vulnerability Overview
CVE-2022-22721	On 32-bit systems, sending an XML payload larger than 350MB when LimitXMLRequestBody is sufficiently high causes an integer overflow and a crash.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/09/2026	Initial release

Back to Security Notices