CVE -CVE-2022-23943 (2024)

TOTAL CVE Records: 240830

NOTICE: Transition to the all-new CVE website at WWW.CVE.ORG and CVE Record Format JSON are underway.

NOTICE: Support for the legacy CVE download formats ended on June 30, 2024.
New CVE List download format is available now on CVE.ORG.

Home > CVE > CVE-2022-23943

CVE-ID
	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:https://www.tenable.com/security/tns-2022-09 CONFIRM:https://security.netapp.com/advisory/ntap-20220321-0001/ URL:https://security.netapp.com/advisory/ntap-20220321-0001/ CONFIRM:https://www.tenable.com/security/tns-2022-08 URL:https://www.tenable.com/security/tns-2022-08 FEDORA:FEDORA-2022-21264ec6db URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/ FEDORA:FEDORA-2022-78e3211c55 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/ FEDORA:FEDORA-2022-b4103753e9 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/ GENTOO:GLSA-202208-20 URL:https://security.gentoo.org/glsa/202208-20 MISC:https://httpd.apache.org/security/vulnerabilities_24.html URL:https://httpd.apache.org/security/vulnerabilities_24.html MISC:https://www.oracle.com/security-alerts/cpuapr2022.html URL:https://www.oracle.com/security-alerts/cpuapr2022.html MLIST:[debian-lts-announce] 20220322 [SECURITY] [DLA 2960-1] apache2 security update URL:https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html MLIST:[oss-security] 20220314 CVE-2022-23943: Apache HTTP Server: mod_sed: Read/write beyond bounds URL:http://www.openwall.com/lists/oss-security/2022/03/14/1
Assigning CNA
Apache Software Foundation
Date Record Created
20220125	Disclaimer: The record creation date may reflect whenthe CVE ID was allocated or reserved, and does notnecessarily indicate when this vulnerability wasdiscovered, shared with the affected vendor, publiclydisclosed, or updated in CVE.
Phase (Legacy)
Assigned (20220125)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
You can also search by reference using the CVE Reference Maps.
For More Information:CVE Request Web Form (select "Other" from dropdown)

CVE - CVE-2022-23943 (2024)