CVE-2022-37436

🗓️ 17 Jan 2023 19:12:59Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 2502 Views

Apache HTTP Server 2.4.55 vulnerability causes response header truncation

Reporter	Title	Published	Views	Family All 213
FreeBSD	Apache httpd -- Multiple vulnerabilities	17 Jan 202300:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM HTTP Server affect WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On	9 Mar 202302:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	30 Mar 202315:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to multiple vulnerabilities due to the included Apache HTTP Server and Apache Portable Runtime	28 Feb 202301:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring included WebSphere Application Server and IBM HTTP Server used by WebSphere Application Server	30 Mar 202318:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console 3.4.2 PL7 has addressed multiple vulnerabilities (CVE-2022-37436, CVE-2021-34798)	23 Feb 202417:40	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server (CVE-2022-28331, CVE-2022-36760, CVE-2022-37436, CVE-2022-25147, CVE-2006-20001)	2 Mar 202320:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities has been identified in IBM HTTP Server shipped with IBM Rational ClearCase [CVE-2022-28331, CVE-2022-36760, CVE-2022-37436, CVE-2022-25147, CVE-2006-20001]	3 Mar 202306:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to HTTP response splitting and denial of service attacks (CVE-2022-37436, CVE-2006-20001)	19 Apr 202315:11	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache HTTP Server (CVE-2022-36760 and CVE-2022-37436 ) affects Power HMC	20 Jun 202309:31	–	ibm

NVD

Vulners

Node

apache http_serverRange<2.4.55

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache HTTP Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "2.4.55",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
security	www.security.gentoo.org/glsa/202309-01

17 Jun 2026 04:55Current

7.3High risk

Vulners AI Score7.3

CVSS 3.15.3

EPSS0.57941

SSVC