CVEvulnerability
CVE-2022-23943
9.8 CRITICAL
Official page ↗
- Status
- Analyzed
- Published
- 2022-03-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-190, CWE-787
Description
Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.
Affected configurations
• apache http server (>= 2.4.0 < 2.4.53)
• fedoraproject fedora 34
• fedoraproject fedora 35
• fedoraproject fedora 36
• debian debian linux 9.0
• oracle http server 12.2.1.3.0
• oracle http server 12.2.1.4.0
• oracle zfs storage appliance kit 8.8
Related
References
- http://www.openwall.com/lists/oss-security/2022/03/14/1 Mailing List, Third Party Advisory
- https://httpd.apache.org/security/vulnerabilities_24.html Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/ Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/ Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/ Third Party Advisory
- https://security.gentoo.org/glsa/202208-20 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220321-0001/ Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
- https://www.tenable.com/security/tns-2022-08 Third Party Advisory
- https://www.tenable.com/security/tns-2022-09 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/03/14/1 Mailing List, Third Party Advisory
- https://httpd.apache.org/security/vulnerabilities_24.html Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/ Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/ Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/ Third Party Advisory
- https://security.gentoo.org/glsa/202208-20 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220321-0001/ Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
- https://www.tenable.com/security/tns-2022-08 Third Party Advisory
- https://www.tenable.com/security/tns-2022-09 Third Party Advisory