CVE-2022-23943critical
Description
Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.
References
https://httpd.apache.org/security/vulnerabilities_24.html
http://www.openwall.com/lists/oss-security/2022/03/14/1
https://security.netapp.com/advisory/ntap-20220321-0001/
https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html
https://www.tenable.com/security/tns-2022-08
https://www.oracle.com/security-alerts/cpuapr2022.html
Details
Source: MITRE
Published: 2022-03-14
Updated: 2022-10-26
Type: CWE-787
Risk Information
CVSS v2
Base Score: 7.5
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Impact Score: 6.4
Exploitability Score: 10
Severity: HIGH
CVSS v3
Base Score: 9.8
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 3.9
Severity: CRITICAL