CVE-2022-22720

· CRITICALModified

← All CVEs

CVSS v3.1

9.8

EPSS

28.19%

Published

Mar 14, 2022

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-444CWE-444

Affected Products (24)

apache · http_servervulnerable

fedoraproject · fedoravulnerable

debian · debian_linuxvulnerable

oracle · enterprise_manager_ops_centervulnerable

oracle · http_servervulnerable

oracle · zfs_storage_appliance_kitvulnerable

apple · mac_os_xvulnerable

apple · macos (up to 10.15.7)vulnerable

apple · macos (up to 11.6.6)vulnerable

apple · macosvulnerable

References (20)

http://seclists.org/fulldisclosure/2022/May/33

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/May/35

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/May/38

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2022/03/14/3

Mailing ListThird Party Advisory

https://httpd.apache.org/security/vulnerabilities_24.html

Vendor Advisory

https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/

https://security.gentoo.org/glsa/202208-20

Third Party Advisory

https://security.netapp.com/advisory/ntap-20220321-0001/

Third Party Advisory

https://support.apple.com/kb/HT213255

Third Party Advisory

https://support.apple.com/kb/HT213256

Third Party Advisory

https://support.apple.com/kb/HT213257

Third Party Advisory

https://www.oracle.com/security-alerts/cpuapr2022.html

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpujul2022.html

Third Party Advisory

http://seclists.org/fulldisclosure/2022/May/33

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/May/35

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/May/38

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2022/03/14/3

Mailing ListThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs