Lucene search

K

ApacheCVELIST:CVE-2022-22719

HistoryMar 14, 2022 - 10:15 a.m.

CVE-2022-22719 mod_lua Use of uninitialized value of in r:parsebody

2022-03-1410:15:16

CWE-665

apache

www.cve.org

2

8.7 High

AI Score

Confidence

High

0.314 Low

EPSS

Percentile

97.0%

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.

CNA Affected

[
  {
    "product": "Apache HTTP Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "2.4.52",
        "status": "affected",
        "version": "Apache HTTP Server 2.4",
        "versionType": "custom"
      }
    ]
  }
]

References

seclists.org/fulldisclosure/2022/May/33

seclists.org/fulldisclosure/2022/May/35

seclists.org/fulldisclosure/2022/May/38

www.openwall.com/lists/oss-security/2022/03/14/4

httpd.apache.org/security/vulnerabilities_24.html

lists.debian.org/debian-lts-announce/2022/03/msg00033.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/

security.gentoo.org/glsa/202208-20

security.netapp.com/advisory/ntap-20220321-0001/

support.apple.com/kb/HT213255

support.apple.com/kb/HT213256

support.apple.com/kb/HT213257

www.oracle.com/security-alerts/cpuapr2022.html

8.7 High

AI Score

Confidence

High

0.314 Low

EPSS

Percentile

97.0%

Related for CVELIST:CVE-2022-22719