CVE-2022-23943

mod_sed: Read/write beyond bounds

Résumé

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami apache

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.53"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Alpine Linux ALPINE-CVE-2022-23943 apache2 Corrigé dans: 2.4.53-r0
Debian DEBIAN-CVE-2022-23943 apache2 Corrigé dans: 2.4.53-1~deb11u1

Références

advisory openwall.com
advisory httpd.apache.org
advisory lists.debian.org
advisory lists.fedoraproject.org
advisory lists.fedoraproject.org
advisory lists.fedoraproject.org
advisory security.gentoo.org
advisory security.netapp.com
advisory oracle.com
advisory tenable.com
advisory tenable.com
web nvd.nist.gov