Lucene search

K

ApacheCVELIST:CVE-2022-23943

HistoryMar 14, 2022 - 10:15 a.m.

CVE-2022-23943 mod_sed: Read/write beyond bounds

2022-03-1410:15:54

CWE-787

CWE-190

apache

www.cve.org

6

mod_sed

apache http server

out-of-bounds write

AI Score

9.7

Confidence

High

EPSS

0.104

Percentile

95.0%

Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.

CNA Affected

[
  {
    "product": "Apache HTTP Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "2.4.52",
        "status": "affected",
        "version": "2.4",
        "versionType": "custom"
      }
    ]
  }
]

References

www.openwall.com/lists/oss-security/2022/03/14/1

httpd.apache.org/security/vulnerabilities_24.html

lists.debian.org/debian-lts-announce/2022/03/msg00033.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/

security.gentoo.org/glsa/202208-20

security.netapp.com/advisory/ntap-20220321-0001/

www.oracle.com/security-alerts/cpuapr2022.html

www.tenable.com/security/tns-2022-08

www.tenable.com/security/tns-2022-09

AI Score

9.7

Confidence

High

EPSS

0.104

Percentile

95.0%

Related for CVELIST:CVE-2022-23943