CVE-2022-23943
mod_sed: Read/write beyond bounds
- State
- Published
- Severity
- Not scored
- Published
- Mar 14, 2022
- Updated
- Aug 3, 2024
- Reserved
- Jan 25, 2022
Description
Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Apache HTTP ServerApache Software Foundation |
|
References
- https://httpd.apache.org/security/vulnerabilities_24.html
- [oss-security] 20220314 CVE-2022-23943: Apache HTTP Server: mod_sed: Read/write beyond boundsmailing-list
- FEDORA-2022-b4103753e9vendor-advisory
- [debian-lts-announce] 20220322 [SECURITY] [DLA 2960-1] apache2 security updatemailing-list
- FEDORA-2022-21264ec6dbvendor-advisory
- FEDORA-2022-78e3211c55vendor-advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.tenable.com/security/tns-2022-08
- https://security.netapp.com/advisory/ntap-20220321-0001/
- https://www.tenable.com/security/tns-2022-09
- GLSA-202208-20vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.