If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may be very large, mod_sed may make excessively large memory allocations and trigger an abort.

CPENameOperatorVersion
apachele2.4.53
apachege2.4.53

CPE	Name	Operator	Version
	apache	le	2.4.53
	apache	ge	2.4.53

References

www.openwall.com/lists/oss-security/2022/06/08/6

httpd.apache.org/security/vulnerabilities_24.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/

security.gentoo.org/glsa/202208-20

security.netapp.com/advisory/ntap-20220624-0005/

openvas 29

nessus 38

cnvd 1

cve 1

cvelist 1

veracode 1

osv 7

ibm 4

httpd 1

alpinelinux 1

redhatcve 1

debiancve 1

prion 1

f5 1

ubuntucve 1

ubuntu 2

fedora 2

amazon 2

slackware 1

redos 1

altlinux 2

freebsd 1

rosalinux 1

photon 5

kaspersky 1

oraclelinux 2

almalinux 2

redhat 5

rocky 2

gentoo 1

oracle 2

openvas

Apache HTTP Server 2.4.53 DoS Vulnerability - Linux

2022-06-10 00:00:00

Apache HTTP Server 2.4.53 DoS Vulnerability - Windows

2022-06-10 00:00:00

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2022-2270)

2022-08-18 00:00:00

nessus

Apache 2.4.x < 2.4.54 Multiple Vulnerabilities

2024-04-17 00:00:00

EulerOS 2.0 SP5 : httpd (EulerOS-SA-2022-2270)

2022-08-17 00:00:00

EulerOS 2.0 SP3 : httpd (EulerOS-SA-2022-2614)

2022-10-27 00:00:00

cnvd

Apache HTTP Server mod_sed denial of service vulnerability

2022-06-10 00:00:00

cve

CVE-2022-30522

2022-06-09 17:15:09

cvelist

CVE-2022-30522 mod_sed denial of service

2022-06-08 10:00:54

veracode

Denial Of Service (DoS)

2022-06-14 16:53:13

osv

CVE-2022-30522

2022-06-09 17:15:09

apache2 regression

2022-06-23 20:19:44

apache2 regression

2022-06-23 09:29:28

ibm

Security Bulletin: IBM Aspera Orchestrator was vulnerable to a denial of service attack due to an Apache HTTP Server vulnerability (CVE-2022-30522)

2023-02-02 17:29:44

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use Mapping Assistance may be vulnerable to CVE-2022-29404, CVE-2022-30522, CVE-2022-30556 and CVE-2022-31813

2022-11-07 11:13:24

Security Bulletin: IBM Aspera Faspex 4.4.2 PL2 has addressed multiple vulnerabilities (CVE-2022-28330, CVE-2023-22868, CVE-2022-30556, CVE-2022-31813, CVE-2022-30522, CVE-2022-47986, CVE-2022-28615, CVE-2022-26377, CVE-2018-25032, CVE-2022-2068)

2023-03-06 22:12:39

httpd

Apache Httpd < 2.4.54 : mod_sed denial of service

2022-06-08 00:00:00

alpinelinux

CVE-2022-30522

2022-06-09 17:15:09

redhatcve

CVE-2022-30522

2022-06-08 20:02:08

debiancve

CVE-2022-30522

2022-06-09 17:15:09

prion

Code injection

2022-06-09 17:15:00

K92153852 : Apache httpd vulnerability CVE-2022-30522

2022-06-16 00:00:00

ubuntucve

CVE-2022-30522

2022-06-09 00:00:00

ubuntu

Apache HTTP Server regression

2022-06-23 00:00:00

Apache HTTP Server regression

2022-06-23 00:00:00

fedora

[SECURITY] Fedora 36 Update: httpd-2.4.54-3.fc36

2022-07-01 01:09:46

[SECURITY] Fedora 35 Update: httpd-2.4.54-1.fc35

2022-07-06 01:54:10

amazon

Medium: httpd

2022-07-06 03:12:00

Medium: httpd24

2022-06-30 23:38:00

slackware

[slackware-security] httpd

2022-06-08 19:24:07

redos

ROS-20220628-01

2022-06-28 00:00:00

altlinux

Security fix for the ALT Linux 9 package apache2 version 1:2.4.54-alt1

2022-06-19 00:00:00

Security fix for the ALT Linux 10 package apache2 version 1:2.4.54-alt1

2022-06-21 00:00:00

freebsd

Apache httpd -- Multiple vulnerabilities

2022-06-08 00:00:00

rosalinux

Advisory ROSA-SA-2023-2161

2023-05-03 11:17:19

photon

Critical Photon OS Security Update - PHSA-2022-0489

2022-06-22 00:00:00

Critical Photon OS Security Update - PHSA-2022-0202

2022-06-22 00:00:00

Critical Photon OS Security Update - PHSA-2022-0409

2022-06-23 00:00:00

kaspersky

KLA12554 Multiple vulnerabilities in Apache HTTP Server

2022-06-08 00:00:00

oraclelinux

httpd:2.4 security update

2022-11-15 00:00:00

httpd security, bug fix, and enhancement update

2022-11-22 00:00:00

almalinux

Moderate: httpd:2.4 security update

2022-11-08 00:00:00

Moderate: httpd security, bug fix, and enhancement update

2022-11-15 00:00:00

redhat

(RHSA-2022:7647) Moderate: httpd:2.4 security update

2022-11-08 06:25:28

(RHSA-2022:8067) Moderate: httpd security, bug fix, and enhancement update

2022-11-15 06:14:59

(RHSA-2022:8840) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 SP1 security update

2022-12-08 12:59:13

rocky

httpd:2.4 security update

2022-11-08 06:25:28

httpd security, bug fix, and enhancement update

2022-11-15 06:14:59

gentoo

Apache HTTPD: Multiple Vulnerabilities

2022-08-14 00:00:00

oracle

Oracle Critical Patch Update Advisory - October 2022

2022-10-18 00:00:00

Oracle Critical Patch Update Advisory - January 2023

2023-01-17 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

7 High

AI Score

Confidence

Low

0.348 Low

EPSS

Percentile

97.1%

JSON

Related for OSV:BIT-APACHE-2022-30522