PT-2022-3378

🗓️ 08 Jun 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 8 Views

Vulnerability in Apache HTTP Server allows remote denial of service via lua script misuse.

Reporter	Title	Published	Views	Family All 300
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by IBM WebSphere Application Server	25 Jul 202215:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use Mapping Assistance may be vulnerable to CVE-2022-29404, CVE-2022-30522, CVE-2022-30556 and CVE-2022-31813	7 Nov 202211:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager.	26 Sep 202218:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Faspex 4.4.2 PL2 has addressed multiple vulnerabilities (CVE-2022-28330, CVE-2023-22868, CVE-2022-30556, CVE-2022-31813, CVE-2022-30522, CVE-2022-47986, CVE-2022-28615, CVE-2022-26377, CVE-2018-25032, CVE-2022-2068)	12 Nov 202402:31	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by denial of service vulnerability (CVE-2022-29404)	2 Feb 202317:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SiteProtector System is affected by multiple Apache HTTP Server Vulnerabilities	8 Aug 202208:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by vulnerability (CVE-2022-28615)	7 Feb 202320:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses "Apache httpd 2.4" which is vulnerable to multiple CVEs	21 Mar 202506:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to bypass security restrictions and obtain sensitive information due to multiple vulnerabilities.	28 Jul 202217:56	–	ibm

Source	Link
suse	www.suse.com/security/cve/CVE-2026-34059
suse	www.suse.com/security/cve/CVE-2026-43951
bugzilla	www.bugzilla.suse.com/1208708
suse	www.suse.com/security/cve/CVE-2026-34356
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-apache-http-cve-2022-26377-cve-2022-28330-cve-2022-28614-cve-2022-28615-c
suse	www.suse.com/security/cve/CVE-2021-44224
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.gentoo.org/glsa/202208-20
bugzilla	www.bugzilla.redhat.com/2095015
suse	www.suse.com/security/cve/CVE-2024-38477

29 Jun 2026 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5 - 9.1

CVSS 26.4

EPSS0.05729

SSVC

apache http server mod lua module denial of service input validation remote attacker vulnerability fix