Lucene search
+L

7370 matches found

Cvelist
Cvelist
•added 2022/03/14 10:15 a.m.•398 views

CVE-2022-22720 HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling...

9.8AI score0.28189EPSS
SaveExploits0References16
AlpineLinux
AlpineLinux
•added 2022/03/14 10:15 a.m.•77 views

CVE-2022-22720

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling...

9.8CVSS9.6AI score0.28189EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/03/14 10:15 a.m.•246 views

CVE-2022-22720

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling...

9.8CVSS8.5AI score0.28189EPSS
SaveExploits0
EUVD
EUVD
•added 2022/03/14 10:15 a.m.•8 views

EUVD-2022-27862

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier...

7.5CVSS6.9AI score0.69097EPSS
SaveExploits0References22
Mend
Mend
•added 2022/03/14 10:15 a.m.•11 views

CVE-2022-22719

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier...

8.7CVSS0.69097EPSS
SaveExploits0References24
osv-cve
osv-cve
•added 2022/03/14 10:15 a.m.•54 views

CVE-2022-22719 mod_lua Use of uninitialized value of in r:parsebody

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier...

7.3AI score
SaveExploits0References17
CVE
CVE
•added 2022/03/14 10:15 a.m.•2276 views

CVE-2022-22719

Summary (CVE-2022-22719) Affects Apache HTTP Server (httpd) 2.4.52 and earlier. The issue arises in the httpd mod_lua component where an uninitialized value in r:parsebody can cause a read to a random memory area, potentially leading to a crash and availability impact. Connected advisories confir...

7.5CVSS8.7AI score0.69097EPSS
SaveExploits0References15Affected Software1
Cvelist
Cvelist
•added 2022/03/14 10:15 a.m.•392 views

CVE-2022-22719 mod_lua Use of uninitialized value of in r:parsebody

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier...

8.7AI score0.69097EPSS
SaveExploits0References15
AlpineLinux
AlpineLinux
•added 2022/03/14 10:15 a.m.•68 views

CVE-2022-22719

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier...

7.5CVSS8.8AI score0.69097EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/03/14 10:15 a.m.•259 views

CVE-2022-22719

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier...

7.5CVSS8.4AI score0.69097EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2022/03/14 4:08 a.m.•597 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-42013 This is the deployment for Apache 2.4.50 which...

9.8CVSS8.3AI score0.99992EPSS
SaveExploits202
CNNVD
CNNVD
•added 2022/03/14 12:00 a.m.•16 views

Apache HTTP Server 环境问题漏洞

Apache HTTP Server is an open source web server from the Apache Foundation. Apache HTTP Server is vulnerable to an environmental issue that results from Apache HTTP Server's inability to close inbound connections when dropping the body of a request, leading to request smuggling. The vulnerability...

9.8CVSS8.2AI score0.28189EPSS
SaveExploits0References53
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/14 12:00 a.m.•6 views

CVE-2022-23943: Out-of-bounds Write

Out-of-bounds Write vulnerability in modsed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions...

9.8CVSS8.3AI score0.50401EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2022/03/14 12:00 a.m.•2552 views

Apache 2.4.x < 2.4.53 Multiple Vulnerabilities

The version of Apache httpd installed on the remote host is prior to 2.4.53. It is, therefore, affected by multiple vulnerabilities as referenced in the 2.4.53 advisory. - modlua Use of uninitialized value of in r:parsebody: A carefully crafted request body can cause a read to a random memory are...

9.8CVSS8.6AI score0.69097EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/14 12:00 a.m.•6 views

CVE-2022-22719: Improper Initialization

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier...

7.5CVSS7.9AI score0.69097EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/14 12:00 a.m.•5 views

CVE-2022-22720: Inconsistent Interpretation of HTTP Requests

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling...

9.8CVSS7.6AI score0.28189EPSS
SaveExploits0References3
FreeBSD
FreeBSD
•added 2022/03/14 12:00 a.m.•108 views

Apache httpd -- Multiple vulnerabilities

The Apache httpd project reports: modlua: Use of uninitialized value of in r:parsebody moderate CVE-2022-22719A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. HTTP request smuggling vulnerability important CVE-2022-22720 httpd fails...

9.8CVSS0.3AI score0.69097EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/14 12:00 a.m.•6 views

CVE-2022-22721: Integer Overflow or Wraparound

If LimitXMLRequestBody is set to allow request bodies larger than 350MB defaults to 1M on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier...

9.1CVSS8.2AI score0.41713EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2022/03/14 12:00 a.m.•125 views

KLA12485 Multiple vulnerabilities in Apache HTTP Server

Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Integer overflow vulnerability in LimitXMLRequestBody can ...

9.8CVSS10AI score0.69097EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2022/03/14 12:00 a.m.•77 views

Apache HTTP Server <= 2.4.52 Multiple Vulnerabilities - Windows

Apache HTTP Server is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

9.8CVSS9.2AI score0.69097EPSS
SaveExploits0References1
Rows per page
Query Builder