CVE-2022-22720

HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier

Résumé

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami apache

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.53"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Alpine Linux ALPINE-CVE-2022-22720 apache2 Corrigé dans: 2.4.53-r0
Debian DEBIAN-CVE-2022-22720 apache2 Corrigé dans: 2.4.53-1~deb11u1

Références

advisory seclists.org
advisory seclists.org
advisory seclists.org
advisory openwall.com
advisory httpd.apache.org
advisory lists.debian.org
advisory security.gentoo.org
advisory security.netapp.com
advisory support.apple.com
advisory support.apple.com
advisory support.apple.com
advisory oracle.com
advisory oracle.com
web lists.fedoraproject.org
web lists.fedoraproject.org
web lists.fedoraproject.org
web nvd.nist.gov