Lucene search

K
f5F5F5:K29735525
HistoryJul 04, 2022 - 12:00 a.m.

K29735525 : Apache HTTPD vulnerability CVE-2022-29404

2022-07-0400:00:00
my.f5.com
97
apache httpd
vulnerability
cve-2022-29404
denial of service
lua script
input size

AI Score

8.3

Confidence

High

EPSS

0.024

Percentile

90.2%

Security Advisory Description

In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a denial of service due to no default limit on possible input size. (CVE-2022-29404)

Impact

There is no impact; F5 products are not affected by this vulnerability.