VULNERABILITY INTELLIGENCE
CVE-2022-22721
CVSS score9.1 CRITICAL
EPSS probability41.71%
CISA KEVNot currently listed
Published2022-03-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Description
If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier.
Weakness classification
- security@apache.org: CWE-190
- nvd@nist.gov: CWE-190
Primary references
- security@apache.org — Third Party Advisory
- security@apache.org — Third Party Advisory
- security@apache.org — Third Party Advisory
- security@apache.org — Mailing List, Third Party Advisory
- security@apache.org — Vendor Advisory
- security@apache.org — Mailing List, Third Party Advisory
- security@apache.org
- security@apache.org
- security@apache.org
- security@apache.org — Third Party Advisory
- security@apache.org — Third Party Advisory
- security@apache.org — Third Party Advisory