Vulnerability · Published Mar 14, 2022 · Assigned by apache
CVE-2022-23943mod_sed: Read/write beyond bounds
Critical 9.8
In plain English
A critical-severity out-of-bounds write in Apache HTTP Server from Apache Software Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 50.4% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)50.4%top 1.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC
Official description
Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | httpd | 2.4.37-51.module_el8.7.0+3281+01e58653 | ALSA-2022:7647 |
| AlmaLinux:9 | httpd | 2.4.53-7.el9 | ALSA-2022:8067 |
| AlmaLinux:9 | httpd-core | 2.4.53-7.el9 | ALSA-2022:8067 |
| AlmaLinux:8 | httpd-devel | 2.4.37-51.module_el8.7.0+3281+01e58653 | ALSA-2022:7647 |
| AlmaLinux:9 | httpd-devel | 2.4.53-7.el9 | ALSA-2022:8067 |
| AlmaLinux:8 | httpd-filesystem | 2.4.37-51.module_el8.7.0+3281+01e58653 | ALSA-2022:7647 |
| AlmaLinux:9 | httpd-filesystem | 2.4.53-7.el9 | ALSA-2022:8067 |
| AlmaLinux:8 | httpd-manual | 2.4.37-51.module_el8.7.0+3281+01e58653 | ALSA-2022:7647 |
| AlmaLinux:9 | httpd-manual | 2.4.53-7.el9 | ALSA-2022:8067 |
| AlmaLinux:8 | httpd-tools | 2.4.37-51.module_el8.7.0+3281+01e58653 | ALSA-2022:7647 |
| AlmaLinux:9 | httpd-tools | 2.4.53-7.el9 | ALSA-2022:8067 |
| AlmaLinux:8 | mod_http2 | 1.15.7-5.module_el8.6.0+2872+fe0ff7aa | ALSA-2022:7647 |
| AlmaLinux:8 | mod_http2 | 1.15.7-5.module_el8.6.0+3031+fb177b09 | ALSA-2022:7647 |
| AlmaLinux:8 | mod_ldap | 2.4.37-51.module_el8.7.0+3281+01e58653 | ALSA-2022:7647 |
| AlmaLinux:9 | mod_ldap | 2.4.53-7.el9 | ALSA-2022:8067 |
| AlmaLinux:9 | mod_lua | 2.4.53-7.el9 | ALSA-2022:8067 |
| AlmaLinux:8 | mod_md | 1:2.0.8-8.module_el8.6.0+3031+fb177b09 | ALSA-2022:7647 |
| AlmaLinux:8 | mod_md | 1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa | ALSA-2022:7647 |
| AlmaLinux:8 | mod_proxy_html | 1:2.4.37-51.module_el8.7.0+3281+01e58653 | ALSA-2022:7647 |
| AlmaLinux:9 | mod_proxy_html | 1:2.4.53-7.el9 | ALSA-2022:8067 |
| AlmaLinux:8 | mod_session | 2.4.37-51.module_el8.7.0+3281+01e58653 | ALSA-2022:7647 |
| AlmaLinux:9 | mod_session | 2.4.53-7.el9 | ALSA-2022:8067 |
| AlmaLinux:8 | mod_ssl | 1:2.4.37-51.module_el8.7.0+3281+01e58653 | ALSA-2022:7647 |
| AlmaLinux:9 | mod_ssl | 1:2.4.53-7.el9 | ALSA-2022:8067 |
| Alpine:v3.20 | apache2 | 2.4.53-r0 | ALPINE-CVE-2022-23943 |
| Alpine:v3.21 | apache2 | 2.4.53-r0 | ALPINE-CVE-2022-23943 |
| Alpine:v3.22 | apache2 | 2.4.53-r0 | ALPINE-CVE-2022-23943 |
| Alpine:v3.23 | apache2 | 2.4.53-r0 | ALPINE-CVE-2022-23943 |
| Alpine:v3.24 | apache2 | 2.4.53-r0 | ALPINE-CVE-2022-23943 |
| Debian:12 | apache2 | 2.4.53-1 | DEBIAN-CVE-2022-23943 |
| Debian:13 | apache2 | 2.4.53-1 | DEBIAN-CVE-2022-23943 |
| Debian:14 | apache2 | 2.4.53-1 | DEBIAN-CVE-2022-23943 |
| Rocky Linux:8 | httpd | 0:2.4.37-51.module+el8.7.0+1059+126e9251 | RLSA-2022:7647 |
| Rocky Linux:9 | httpd | 0:2.4.53-7.el9 | RLSA-2022:8067 |
| Rocky Linux:8 | mod_http2 | 0:1.15.7-5.module+el8.6.0+823+f143cee1 | RLSA-2022:7647 |
| Rocky Linux:8 | mod_md | 1:2.0.8-8.module+el8.5.0+695+1fa8055e | RLSA-2022:7647 |
| Rocky Linux:8 | mod_md | 1:2.0.8-8.module+el8.4.0+553+7a69454b | RLSA-2022:7647 |
| Ubuntu:22.04:LTS | apache2 | 2.4.52-1ubuntu2 | UBUNTU-CVE-2022-23943 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Apache HTTP Server | 2.4 – through 2.4.52 |
Weakness: CWE-787, CWE-190
References
- https://httpd.apache.org/security/vulnerabilities_24.html x_refsource_MISC
- [oss-security] 20220314 CVE-2022-23943: Apache HTTP Server: mod_sed: Read/write beyond bounds mailing-list, x_refsource_MLIST
- FEDORA-2022-b4103753e9 vendor-advisory, x_refsource_FEDORA
- [debian-lts-announce] 20220322 [SECURITY] [DLA 2960-1] apache2 security update mailing-list, x_refsource_MLIST
- FEDORA-2022-21264ec6db vendor-advisory, x_refsource_FEDORA
- FEDORA-2022-78e3211c55 vendor-advisory, x_refsource_FEDORA
- https://www.oracle.com/security-alerts/cpuapr2022.html x_refsource_MISC
- https://www.tenable.com/security/tns-2022-08 x_refsource_CONFIRM
- https://security.netapp.com/advisory/ntap-20220321-0001/ x_refsource_CONFIRM
- https://www.tenable.com/security/tns-2022-09 x_refsource_CONFIRM
- GLSA-202208-20 vendor-advisory, x_refsource_GENTOO