If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier.

CPENameOperatorVersion
http_serverle2.4.52
mac_os_xge10.15
mac_os_xlt10.15.7
mac_os_xeq10.15.7
mac_os_xeq10.15.7
mac_os_xeq10.15.7
mac_os_xeq10.15.7
mac_os_xeq10.15.7
mac_os_xeq10.15.7
mac_os_xeq10.15.7

Name	Operator	Version
http_server	le	2.4.52
mac_os_x	ge	10.15
mac_os_x	lt	10.15.7
mac_os_x	eq	10.15.7
mac_os_x	eq	10.15.7
mac_os_x	eq	10.15.7
mac_os_x	eq	10.15.7
mac_os_x	eq	10.15.7
mac_os_x	eq	10.15.7
mac_os_x	eq	10.15.7

Rows per page:

1-10 of 271

References

seclists.org/fulldisclosure/2022/May/33

seclists.org/fulldisclosure/2022/May/35

seclists.org/fulldisclosure/2022/May/38

www.openwall.com/lists/oss-security/2022/03/14/2

httpd.apache.org/security/vulnerabilities_24.html

lists.debian.org/debian-lts-announce/2022/03/msg00033.html

lists.fedoraproject.org/archives/list/[email protected]/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/

lists.fedoraproject.org/archives/list/[email protected]/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/

lists.fedoraproject.org/archives/list/[email protected]/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/

security.gentoo.org/glsa/202208-20

security.netapp.com/advisory/ntap-20220321-0001/

support.apple.com/kb/HT213255

support.apple.com/kb/HT213256

support.apple.com/kb/HT213257

www.oracle.com/security-alerts/cpuapr2022.html

www.oracle.com/security-alerts/cpujul2022.html

alpinelinux 1

nvd 1

debiancve 1

zdi 1

osv 9

f5 1

cvelist 1

ibm 18

ubuntucve 1

httpd 1

redhatcve 1

veracode 1

cbl_mariner 2

cve 1

nessus 52

cloudlinux 1

openvas 34

slackware 1

suse 1

ubuntu 2

debian 1

altlinux 2

amazon 2

mageia 1

kaspersky 1

redos 1

photon 5

freebsd 1

fedora 3

thn 1

almalinux 2

oraclelinux 2

redhat 5

rocky 2

rosalinux 1

gentoo 1

apple 3

oracle 3

alpinelinux

CVE-2022-22721

2022-03-14 11:15:09

nvd

CVE-2022-22721

2022-03-14 11:15:09

debiancve

CVE-2022-22721

2022-03-14 11:15:09

zdi

Apache HTTPD Server ap_escape_html2 Integer Overflow Remote Code Execution Vulnerability

2022-06-29 00:00:00

osv

CVE-2022-22721

2022-03-14 11:15:09

BIT-apache-2022-22721

2024-03-06 10:53:38

apache2 - security update

2022-03-22 00:00:00

K20451100 : Apache vulnerability CVE-2022-22721

2022-04-12 00:00:00

cvelist

CVE-2022-22721 core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody

2022-03-14 10:15:40

ibm

Security Bulletin: IBM Rational Build Forge is affected by Apache HTTP Server version used in it. (CVE-2022-22721)

2022-07-12 13:19:21

Security Bulletin: IBM Aspera Orchestrator affected by buffer overflow vulnerability ( CVE-2022-22721)

2023-02-02 17:41:29

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use Mapping Assistance may be vulnerable to arbitrary code execution due to CVE-2022-22721

2022-11-07 16:12:40

ubuntucve

CVE-2022-22721

2022-03-14 00:00:00

httpd

Apache Httpd < 2.4.53 : core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody

2022-03-14 00:00:00

redhatcve

CVE-2022-22721

2022-03-15 14:43:53

veracode

Integer Overflow

2022-03-15 10:12:50

cbl_mariner

CVE-2022-22721 affecting package httpd 2.4.52-1

2022-04-07 06:04:02

CVE-2022-22721 affecting package httpd for versions less than 2.4.53-1

2022-04-26 19:57:38

cve

CVE-2022-22721

2022-03-14 11:15:09

nessus

SUSE SLES11 Security Update : apache2 (SUSE-SU-2022:14924-1)

2022-03-22 00:00:00

Oracle Enterprise Manager Ops Center (Jul 2022 CPU)

2022-07-22 00:00:00

Debian DLA-2960-1 : apache2 - LTS security update

2022-03-22 00:00:00

cloudlinux

Fix of CVE: CVE-2022-22721, CVE-2022-22720

2022-03-24 15:36:17

openvas

SUSE: Security Advisory (SUSE-SU-2022:14924-1)

2022-03-22 00:00:00

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2022-1893)

2022-06-17 00:00:00

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2022-1790)

2022-06-07 00:00:00

slackware

[slackware-security] httpd

2022-03-15 01:06:06

suse

Security update for apache2 (important)

2022-03-29 00:00:00

ubuntu

Apache HTTP Server vulnerabilities

2022-03-17 00:00:00

Apache HTTP Server vulnerabilities

2022-03-17 00:00:00

debian

[SECURITY] [DLA 2960-1] apache2 security update

2022-03-22 07:32:37

altlinux

Security fix for the ALT Linux 9 package apache2 version 1:2.4.53-alt1

2022-03-29 00:00:00

Security fix for the ALT Linux 10 package apache2 version 1:2.4.53-alt1

2022-03-25 00:00:00

amazon

Important: httpd24

2022-04-26 17:12:00

Important: httpd

2022-04-25 22:57:00

mageia

Updated apache packages fix security vulnerability

2022-03-21 23:18:30

kaspersky

KLA12485 Multiple vulnerabilities in Apache HTTP Server

2022-03-14 00:00:00

redos

ROS-20220317-01

2022-03-17 00:00:00

photon

Critical Photon OS Security Update - PHSA-2022-0455

2022-03-25 00:00:00

Critical Photon OS Security Update - PHSA-2022-0166

2022-03-25 00:00:00

Critical Photon OS Security Update - PHSA-2022-4.0-0166

2022-03-25 00:00:00

freebsd

Apache httpd -- Multiple vulnerabilities

2022-03-14 00:00:00

fedora

[SECURITY] Fedora 34 Update: httpd-2.4.53-1.fc34

2022-03-25 22:06:50

[SECURITY] Fedora 36 Update: httpd-2.4.53-1.fc36

2022-03-26 15:55:33

[SECURITY] Fedora 35 Update: httpd-2.4.53-1.fc35

2022-03-22 03:44:42

thn

QNAP Advises Users to Update NAS Firmware to Patch Apache HTTP Vulnerabilities

2022-04-22 08:15:00

almalinux

Moderate: httpd:2.4 security update

2022-11-08 00:00:00

Moderate: httpd security, bug fix, and enhancement update

2022-11-15 00:00:00

oraclelinux

httpd:2.4 security update

2022-11-15 00:00:00

httpd security, bug fix, and enhancement update

2022-11-22 00:00:00

redhat

(RHSA-2022:8067) Moderate: httpd security, bug fix, and enhancement update

2022-11-15 06:14:59

(RHSA-2022:7647) Moderate: httpd:2.4 security update

2022-11-08 06:25:28

(RHSA-2022:6753) Moderate: httpd24-httpd security and bug fix update

2022-09-29 13:20:41

rocky

httpd:2.4 security update

2022-11-08 06:25:28

httpd security, bug fix, and enhancement update

2022-11-15 06:14:59

rosalinux

Advisory ROSA-SA-2023-2160

2023-04-25 12:02:31

gentoo

Apache HTTPD: Multiple Vulnerabilities

2022-08-14 00:00:00

apple

About the security content of Security Update 2022-004 Catalina

2022-05-16 00:00:00

About the security content of macOS Big Sur 11.6.6

2022-05-16 00:00:00

About the security content of macOS Monterey 12.4

2022-05-16 00:00:00

oracle

Oracle Critical Patch Update Advisory - January 2023

2023-01-17 00:00:00

Oracle Critical Patch Update Advisory - July 2022

2022-07-19 00:00:00

Oracle Critical Patch Update Advisory - April 2022

2022-04-19 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

9.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.7%

JSON

Related for PRION:CVE-2022-22721