The vulnerability of the Apache HTTP Server web server relates to the occurrence of operations outside the buffer in memory, allowing an attacker to execute arbitrary code.

🗓️ 25 Mar 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

The Apache web server vulnerability allows remote code execution by performing operations outside the memory buffer.

Reporter	Title	Published	Views	Family All 227
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use Mapping Assistance may be vulnerable to arbitrary code execution due to CVE-2022-22721	7 Nov 202216:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by IBM WebSphere Application Server (CVE-2022-22719, CVE-2022-22720, CVE-2022-22721)	22 Mar 202217:56	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager (CVE-2022-22719, CVE-2022-22720, CVE-2022-22721)	24 May 202209:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring included WebSphere Application Server and IBM HTTP Server used by WebSphere Application Server	30 Dec 202217:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On (CVE-2022-22719, CVE-2022-22720, CVE-2022-22721)	31 Mar 202202:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM HTTP Server used by IBM Rational ClearQuest (CVE-2022-22719, CVE-2022-22720, CVE-2022-22721)	30 Mar 202202:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge is affected by Apache HTTP Server version used in it. (CVE-2022-22721)	12 Jul 202213:19	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server affect IBM Business Automation Workflow and IBM Business Process Manager	14 Sep 202215:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SiteProtector System is affected by multiple Apache HTTP Server Vulnerabilities	2 Jun 202202:42	–	ibm

Vulners

Node

apache http_serverRange2.4.0–2.4.53

Source	Link
redos	www.redos.red-soft.ru/support/secure/
goslinux	www.goslinux.fssp.gov.ru/2726972/
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-22721
altsp	www.altsp.su/obnovleniya-bezopasnosti/
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2022-0819SE17
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.4.3/

19 Aug 2025 00:00Current

8.5High risk

Vulners AI Score8.5

CVSS 39.8

CVSS 210

EPSS0.13473

Apache web server remote code execution memory buffer outside memory buffer