cbcvebase.
CVE-2022-22719
published 2022-03-14

CVE-2022-22719: A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52…

high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.

Affected

19 ranges
VendorProductVersion rangeFixed in
apachehttp_server<= 2.4.52
apache_software_foundationapache_http_serverApache HTTP Server 2.4 – 2.4.52
applemac_os_x
applemacos< 10.15.710.15.7
applemacos>= 11.0 < 11.6.611.6.6
applemacos>= 12.0.0 < 12.412.4
applemacos_big_sur
applemacos_monterey
applesecurity_update_2022-004_catalina
debianapache2< apache2 2.4.53-1 (bookworm)apache2 2.4.53-1 (bookworm)
debiandebian_linux
fedoraprojectfedora
fedoraprojectfedora
fedoraprojectfedora
msrccbl2_httpd_2.4.53-1_on_cbl_mariner_2.0
msrccm1_httpd_2.4.53-1_on_cbl_mariner_1.0
oraclehttp_server
oraclehttp_server
oraclezfs_storage_appliance_kit

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH