VULNERABILITY INTELLIGENCE
CVE-2022-23943
CVSS score9.8 CRITICAL
EPSS probability50.40%
CISA KEVNot currently listed
Published2022-03-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.
Weakness classification
- CWE-190: Integer Overflow or Wraparound
- CWE-787: Out-of-bounds Write
Primary references
- security@apache.org — Mailing List, Third Party Advisory
- security@apache.org — Vendor Advisory
- security@apache.org — Mailing List, Third Party Advisory
- security@apache.org — Third Party Advisory
- security@apache.org — Third Party Advisory
- security@apache.org — Third Party Advisory
- security@apache.org — Third Party Advisory
- security@apache.org — Third Party Advisory
- security@apache.org — Patch, Third Party Advisory
- security@apache.org — Third Party Advisory
- security@apache.org — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory