DeutschShown in its original language — a full translation is planned for a future version.
Apache HTTP Server: Mehrere Schwachstellen
view advisory published 2022-03-13
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-23943US | critical9.8 | — | ||
Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP… | ||||
| CVE-2022-22721US | critical9.1 | — | ||
If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This… | ||||
| CVE-2022-22720US | critical9.8 | Exploit | ||
Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling | ||||
| CVE-2022-22719US | high7.5 | — | ||
A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier. | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2022-1045 vom 2022-03-24external
- Oracle Linux Security Advisory ELSA-2022-1049 vom 2022-03-25external
- Oracle Linux Security Advisory ELSA-2022-9676 vom 2022-08-04external
- Red Hat Security Advisory RHSA-2022:1045 vom 2022-03-24external
- Red Hat Security Advisory RHSA-2022:1049 vom 2022-03-24external
- Red Hat Security Advisory RHSA-2022:1072 vom 2022-03-28external
- Red Hat Security Advisory RHSA-2022:1075 vom 2022-03-28external
- Red Hat Security Advisory RHSA-2022:1080 vom 2022-03-28external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan