CVE-2022-23943
mod_sed: Read/write beyond bounds
Summary
mod_sed: Read/write beyond bounds
Original description
The description as published by the source.
Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.
Affected packages
Bitnami
apache
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.53"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2022-23943 apache2 Fixed in: 2.4.53-r0
- Debian DEBIAN-CVE-2022-23943 apache2 Fixed in: 2.4.53-1~deb11u1
References
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory nvd.nist.gov
- advisory github.com
- web openwall.com
- web httpd.apache.org
- web lists.debian.org
- web oracle.com
- web tenable.com
- web tenable.com