Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.113838
Kategorie:Web Servers
Titel:Apache HTTP Server <= 2.4.52 Multiple Vulnerabilities - Windows
Zusammenfassung:Apache HTTP Server is prone to multiple vulnerabilities.
Beschreibung:Summary:
Apache HTTP Server is prone to multiple vulnerabilities.

Vulnerability Insight:
The following vulnerabilities exist:

- CVE-2022-22719: mod_lua Use of uninitialized value of in r:parsebody

- CVE-2022-22720: HTTP request smuggling vulnerability

- CVE-2022-22721: Possible buffer overflow with very large or unlimited LimitXMLRequestBody

- CVE-2022-23943: mod_sed: Read/write beyond bounds

Affected Software/OS:
Apache HTTP Server version 2.4.52 and prior.

Solution:
Update to version 2.4.53 or later.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2022-22719
https://security.netapp.com/advisory/ntap-20220321-0001/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/
http://seclists.org/fulldisclosure/2022/May/38
http://seclists.org/fulldisclosure/2022/May/35
http://seclists.org/fulldisclosure/2022/May/33
https://security.gentoo.org/glsa/202208-20
https://httpd.apache.org/security/vulnerabilities_24.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html
http://www.openwall.com/lists/oss-security/2022/03/14/4
Common Vulnerability Exposure (CVE) ID: CVE-2022-22720
https://support.apple.com/kb/HT213255
https://support.apple.com/kb/HT213256
https://support.apple.com/kb/HT213257
https://www.oracle.com/security-alerts/cpujul2022.html
http://www.openwall.com/lists/oss-security/2022/03/14/3
Common Vulnerability Exposure (CVE) ID: CVE-2022-22721
http://www.openwall.com/lists/oss-security/2022/03/14/2
Common Vulnerability Exposure (CVE) ID: CVE-2022-23943
https://www.tenable.com/security/tns-2022-08
http://www.openwall.com/lists/oss-security/2022/03/14/1
CopyrightCopyright (C) 2022 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.