CVE-2022-23943

Katalog CVE

CVSS 9.8 · Critical EPSS 50,4%

Kerentanan Integer Overflow or Wraparound pada apache http server, fedoraproject fedora +3 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.

Rincian

Terbit di NVD

14 Maret 2022

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound
CWE-787: Out-of-bounds Write

EPSS (30 hari)

50,4% peluang dieksploitasi; lebih tinggi dari 98,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://httpd.apache.org/security/vulnerabilities_24.html advisory vendor
• https://www.oracle.com/security-alerts/cpuapr2022.html patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2022/03/14/1 mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SH... advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBV... advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNW... advisory pihak ketiga
• https://security.gentoo.org/glsa/202208-20 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20220321-0001/ advisory pihak ketiga
• https://www.tenable.com/security/tns-2022-08 advisory pihak ketiga
• https://www.tenable.com/security/tns-2022-09 advisory pihak ketiga