CVE-2022-30522

🗓️ 08 Jun 2022 10:00:54Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 899 Views

If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may be very large, mod_sed may make excessively large memory allocations and trigger an abort

Reporter	Title	Published	Views	Family All 179
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge 8.0.0.25 addresses multiple vulnerabilities	24 Nov 202313:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use Mapping Assistance may be vulnerable to CVE-2022-29404, CVE-2022-30522, CVE-2022-30556 and CVE-2022-31813	7 Nov 202211:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Faspex 4.4.2 PL2 has addressed multiple vulnerabilities (CVE-2022-28330, CVE-2023-22868, CVE-2022-30556, CVE-2022-31813, CVE-2022-30522, CVE-2022-47986, CVE-2022-28615, CVE-2022-26377, CVE-2018-25032, CVE-2022-2068)	12 Nov 202402:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Cloud Pak System.	9 Oct 202417:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator was vulnerable to a denial of service attack due to an Apache HTTP Server vulnerability (CVE-2022-30522)	2 Feb 202317:29	–	ibm
FreeBSD	Apache httpd -- Multiple vulnerabilities	8 Jun 202200:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 10 package apache2 version 1:2.4.54-alt1	21 Jun 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package apache2 version 1:2.4.54-alt1	19 Jun 202200:00	–	altlinux
ATTACKERKB	CVE-2022-30522	9 Jun 202217:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : httpd, httpd-core, httpd-devel (ALAS2022-2022-110)	7 Sep 202200:00	–	nessus

NVD

Vulners

Node

apache http_serverMatch2.4.53

Node

netapp clustered_data_ontapMatch-

Node

fedoraproject fedoraMatch35

fedoraproject fedoraMatch36

[
  {
    "product": "Apache HTTP Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "2.4.53"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2022/06/08/6
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/
security	www.security.netapp.com/advisory/ntap-20220624-0005/
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
security	www.security.gentoo.org/glsa/202208-20