(RHSA-2022:1049) Important: httpd:2.4 security update

2022-03-2410:44:04

access.redhat.com

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

84.9%

JSON

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling (CVE-2022-22720)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanynoarchhttpd-manual< 2.4.37-43.module+el8.5.0+14530+6f259f31.3httpd-manual-2.4.37-43.module+el8.5.0+14530+6f259f31.3.noarch.rpm
RedHatanyppc64lemod_ldap< 2.4.37-43.module+el8.5.0+14530+6f259f31.3mod_ldap-2.4.37-43.module+el8.5.0+14530+6f259f31.3.ppc64le.rpm
RedHatanynoarchhttpd-filesystem< 2.4.37-43.module+el8.5.0+14530+6f259f31.3httpd-filesystem-2.4.37-43.module+el8.5.0+14530+6f259f31.3.noarch.rpm
RedHatanyaarch64httpd-debuginfo< 2.4.37-43.module+el8.5.0+14530+6f259f31.3httpd-debuginfo-2.4.37-43.module+el8.5.0+14530+6f259f31.3.aarch64.rpm
RedHatanys390xmod_proxy_html-debuginfo< 2.4.37-43.module+el8.5.0+14530+6f259f31.3mod_proxy_html-debuginfo-2.4.37-43.module+el8.5.0+14530+6f259f31.3.s390x.rpm
RedHatanyaarch64mod_md< 2.0.8-8.module+el8.3.0+6814+67d1e611mod_md-2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64.rpm
RedHatanyppc64lemod_session-debuginfo< 2.4.37-43.module+el8.5.0+14530+6f259f31.3mod_session-debuginfo-2.4.37-43.module+el8.5.0+14530+6f259f31.3.ppc64le.rpm
RedHatanys390xhttpd-debugsource< 2.4.37-43.module+el8.5.0+14530+6f259f31.3httpd-debugsource-2.4.37-43.module+el8.5.0+14530+6f259f31.3.s390x.rpm
RedHatanyppc64lehttpd-tools-debuginfo< 2.4.37-43.module+el8.5.0+14530+6f259f31.3httpd-tools-debuginfo-2.4.37-43.module+el8.5.0+14530+6f259f31.3.ppc64le.rpm
RedHatanyppc64lemod_ldap-debuginfo< 2.4.37-43.module+el8.5.0+14530+6f259f31.3mod_ldap-debuginfo-2.4.37-43.module+el8.5.0+14530+6f259f31.3.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	noarch	httpd-manual	< 2.4.37-43.module+el8.5.0+14530+6f259f31.3	httpd-manual-2.4.37-43.module+el8.5.0+14530+6f259f31.3.noarch.rpm
RedHat	any	ppc64le	mod_ldap	< 2.4.37-43.module+el8.5.0+14530+6f259f31.3	mod_ldap-2.4.37-43.module+el8.5.0+14530+6f259f31.3.ppc64le.rpm
RedHat	any	noarch	httpd-filesystem	< 2.4.37-43.module+el8.5.0+14530+6f259f31.3	httpd-filesystem-2.4.37-43.module+el8.5.0+14530+6f259f31.3.noarch.rpm
RedHat	any	aarch64	httpd-debuginfo	< 2.4.37-43.module+el8.5.0+14530+6f259f31.3	httpd-debuginfo-2.4.37-43.module+el8.5.0+14530+6f259f31.3.aarch64.rpm
RedHat	any	s390x	mod_proxy_html-debuginfo	< 2.4.37-43.module+el8.5.0+14530+6f259f31.3	mod_proxy_html-debuginfo-2.4.37-43.module+el8.5.0+14530+6f259f31.3.s390x.rpm
RedHat	any	aarch64	mod_md	< 2.0.8-8.module+el8.3.0+6814+67d1e611	mod_md-2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64.rpm
RedHat	any	ppc64le	mod_session-debuginfo	< 2.4.37-43.module+el8.5.0+14530+6f259f31.3	mod_session-debuginfo-2.4.37-43.module+el8.5.0+14530+6f259f31.3.ppc64le.rpm
RedHat	any	s390x	httpd-debugsource	< 2.4.37-43.module+el8.5.0+14530+6f259f31.3	httpd-debugsource-2.4.37-43.module+el8.5.0+14530+6f259f31.3.s390x.rpm
RedHat	any	ppc64le	httpd-tools-debuginfo	< 2.4.37-43.module+el8.5.0+14530+6f259f31.3	httpd-tools-debuginfo-2.4.37-43.module+el8.5.0+14530+6f259f31.3.ppc64le.rpm
RedHat	any	ppc64le	mod_ldap-debuginfo	< 2.4.37-43.module+el8.5.0+14530+6f259f31.3	mod_ldap-debuginfo-2.4.37-43.module+el8.5.0+14530+6f259f31.3.ppc64le.rpm