Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-23943HistoryMar 14, 2022 - 11:15 a.m.
CVE-2022-23943
2022-03-1411:15:09
Debian Security Bug Tracker
security-tracker.debian.org
106
apache
http server
out-of-bounds write
vulnerability
mod_sed
heap memory
cve-2022-23943
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.104
Percentile
95.0%
Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | apache2 | < 2.4.53-1 | apache2_2.4.53-1_all.deb |
| Debian | 11 | all | apache2 | < 2.4.53-1~deb11u1 | apache2_2.4.53-1~deb11u1_all.deb |
| Debian | 999 | all | apache2 | < 2.4.53-1 | apache2_2.4.53-1_all.deb |
| Debian | 13 | all | apache2 | < 2.4.53-1 | apache2_2.4.53-1_all.deb |
Related
osv
osv
CVE-2022-23943
2022-03-14 11:15:09
BIT-apache-2022-23943
2024-03-06 10:53:25
apache2 vulnerabilities
2022-03-17 11:31:47
cbl_mariner
cbl_mariner
CVE-2022-23943 affecting package httpd 2.4.52-1
2022-04-07 06:04:02
CVE-2022-23943 affecting package httpd for versions less than 2.4.53-1
2022-04-26 19:57:38
nessus
nessus
EulerOS 2.0 SP11 : httpd (EulerOS-SA-2023-1423)
2023-03-07 00:00:00
EulerOS 2.0 SP11 : httpd (EulerOS-SA-2023-1408)
2023-03-07 00:00:00
veracode
veracode
Out-of-bounds Write
2022-03-15 13:26:56
nvd
nvd
CVE-2022-23943
2022-03-14 11:15:09
hackerone
hackerone
Internet Bug Bounty: Read and write beyond bounds in mod_sed
2022-03-14 19:03:51
ibm
ibm
openvas
openvas
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-1408)
2023-03-07 00:00:00
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-1423)
2023-03-07 00:00:00
Ubuntu: Security Advisory (USN-5333-1)
2022-03-18 00:00:00
cvelist
cvelist
CVE-2022-23943 mod_sed: Read/write beyond bounds
2022-03-14 10:15:54
cve
cve
CVE-2022-23943
2022-03-14 11:15:09
prion
prion
Cross site scripting
2022-03-14 11:15:00
alpinelinux
alpinelinux
CVE-2022-23943
2022-03-14 11:15:09
redhatcve
redhatcve
CVE-2022-23943
2022-03-15 14:43:57
f5
f5
K51396437 : Apache vulnerability CVE-2022-23943
2022-04-19 00:00:00
httpd
httpd
Apache Httpd < 2.4.53 : mod_sed: Read/write beyond bounds
2022-03-14 00:00:00
ubuntucve
ubuntucve
CVE-2022-23943
2022-03-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 1:2.4.53-alt1
2022-03-29 00:00:00
Security fix for the ALT Linux 10 package apache2 version 1:2.4.53-alt1
2022-03-25 00:00:00
amazon
amazon
Important: httpd24
2022-04-26 17:12:00
Important: httpd
2022-04-25 22:57:00
redos
redos
ROS-20220317-01
2022-03-17 00:00:00
slackware
slackware
[slackware-security] httpd
2022-03-15 01:06:06
suse
suse
Security update for apache2 (important)
2022-03-29 00:00:00
kaspersky
kaspersky
KLA12485 Multiple vulnerabilities in Apache HTTP Server
2022-03-14 00:00:00
mageia
mageia
Updated apache packages fix security vulnerability
2022-03-21 23:18:30
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2022-03-17 00:00:00
Apache HTTP Server vulnerabilities
2022-03-17 00:00:00
debian
debian
[SECURITY] [DLA 2960-1] apache2 security update
2022-03-22 07:32:37
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2022-03-14 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-0455
2022-03-25 00:00:00
Critical Photon OS Security Update - PHSA-2022-0166
2022-03-25 00:00:00
Critical Photon OS Security Update - PHSA-2022-4.0-0166
2022-03-25 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: httpd-2.4.53-1.fc36
2022-03-26 15:55:33
[SECURITY] Fedora 34 Update: httpd-2.4.53-1.fc34
2022-03-25 22:06:50
[SECURITY] Fedora 35 Update: httpd-2.4.53-1.fc35
2022-03-22 03:44:42
thn
thn
ics
ics
Mitsubishi Electric MELSOFT iQ AppPortal
2022-05-12 12:00:00
redhat
redhat
(RHSA-2022:7647) Moderate: httpd:2.4 security update
2022-11-08 06:25:28
(RHSA-2022:8067) Moderate: httpd security, bug fix, and enhancement update
2022-11-15 06:14:59
rocky
rocky
httpd:2.4 security update
2022-11-08 06:25:28
httpd security, bug fix, and enhancement update
2022-11-15 06:14:59
oraclelinux
oraclelinux
httpd security, bug fix, and enhancement update
2022-11-22 00:00:00
httpd:2.4 security update
2022-11-15 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2160
2023-04-25 12:02:31
almalinux
almalinux
Moderate: httpd:2.4 security update
2022-11-08 00:00:00
Moderate: httpd security, bug fix, and enhancement update
2022-11-15 00:00:00
gentoo
gentoo
Apache HTTPD: Multiple Vulnerabilities
2022-08-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.104
Percentile
95.0%
Related for DEBIANCVE:CVE-2022-23943