EUVD-2022-33743

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Denial of service vulnerability in Apache HTTP Server 2.4.53 from uncontrolled input size in lua script

Reporter	Title	Published	Views	Family All 184
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by IBM WebSphere Application Server	25 Jul 202215:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use Mapping Assistance may be vulnerable to CVE-2022-29404, CVE-2022-30522, CVE-2022-30556 and CVE-2022-31813	7 Nov 202211:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager.	26 Sep 202218:30	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by denial of service vulnerability (CVE-2022-29404)	2 Feb 202317:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SiteProtector System is affected by multiple Apache HTTP Server Vulnerabilities	8 Aug 202208:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring included WebSphere Application Server and IBM HTTP Server used by WebSphere Application Server	30 Dec 202217:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge is vulnerable to a denial of service due to the use of Apache HTTP server (CVE-2022-29404).	19 Oct 202316:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On	28 Jul 202203:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-26377, CVE-2022-31813, CVE-2022-30556)	30 Jun 202206:55	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "1a2d103a-635c-39c2-973a-653cc8b47574",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "400f29b0-30f7-3498-9ea2-45ad94e7c77c",
        "product": {
          "name": "Apache HTTP Server"
        },
        "product_version": "unspecified ≤2.4.53"
      }
    ]
  }
]

Source	Link
security	www.security.archlinux.org/CVE-2022-29404
advisories	www.advisories.mageia.org/CVE-2022-29404.html
suse	www.suse.com/security/cve/CVE-2022-29404.html
ubuntu	www.ubuntu.com/security/CVE-2022-29404
alas	www.alas.aws.amazon.com/cve/html/CVE-2022-29404.html
access	www.access.redhat.com/errata/RHSA-2022:6753
access	www.access.redhat.com/errata/RHSA-2022:7647
access	www.access.redhat.com/errata/RHSA-2022:8067
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
openwall	www.openwall.com/lists/oss-security/2022/06/08/5

03 Oct 2025 20:07Current

8.1High risk

Vulners AI Score8.1

CVSS 3.17.5

CVSS 25

EPSS0.02008