BIT-apache-2022-22720

vendorUSosv

HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier

Advisory ansehen veröffentlicht 2024-03-06Lizenz: per source

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2022-22720US	critical9.8	28.2% (98th)	Exploit	2022-03-14
Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

http://seclists.org/fulldisclosure/2022/May/33ADVISORY
http://seclists.org/fulldisclosure/2022/May/35ADVISORY
http://seclists.org/fulldisclosure/2022/May/38ADVISORY
http://www.openwall.com/lists/oss-security/2022/03/14/3ADVISORY
https://httpd.apache.org/security/vulnerabilities_24.htmlADVISORY
https://lists.debian.org/debian-lts-announce/2022/03/msg00033.htmlADVISORY
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/WEB
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/WEB

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan