by Kastro
Paper/Archive/CVE-2022-22721

CVE-2022-22721

Apache Software Foundation Apache HTTP Server — core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody

EPSS 42%CVSS 9.1
critical.is priorityof 100
47
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 98.7.987 × 2019.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier.

Affected

ProductAffectedFixed inSource
Apache HTTP ServerApache HTTP Server 2.4 – 2.4.52–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

References

refhttpd.apache.org/security/vulnerabilities_24.htmlrefopenwall.com/lists/oss-security/2022/03/14/2advisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZOreflists.debian.org/debian-lts-announce/2022/03/msg00033.htmladvisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTDadvisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FOreforacle.com/security-alerts/cpuapr2022.htmlrefsecurity.netapp.com/advisory/ntap-20220321-0001refseclists.org/fulldisclosure/2022/May/33refseclists.org/fulldisclosure/2022/May/35refseclists.org/fulldisclosure/2022/May/38reforacle.com/security-alerts/cpujul2022.htmlrefsupport.apple.com/kb/HT213257refsupport.apple.com/kb/HT213256refsupport.apple.com/kb/HT213255advisorysecurity.gentoo.org/glsa/202208-20