CVE-2022-22721

CRITICAL severity · CVSS 9.1 · Integer overflow

9.1CVSS CRITICAL

Summary

If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

Confidentiality impactNone

Integrity impactHigh

Availability impactHigh

Exploit probability (EPSS)13%

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Affected products we track (1)

Apache HTTP Server

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

NVD record
https://httpd.apache.org/security/vulnerabilities_24.htmlAdvisory
http://seclists.org/fulldisclosure/2022/May/33Advisory
http://seclists.org/fulldisclosure/2022/May/35Advisory
http://seclists.org/fulldisclosure/2022/May/38Advisory
http://www.openwall.com/lists/oss-security/2022/03/14/2Advisory
https://lists.debian.org/debian-lts-announce/2022/03/msg00033.htmlAdvisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/