Описание
If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may be very large, mod_sed may make excessively large memory allocations and trigger an abort.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| apache2 | fixed | 2.4.54-1 | package | |
| apache2 | fixed | 2.4.54-1~deb11u1 | bullseye | package |
| apache2 | fixed | 2.4.38-3+deb10u8 | buster | package |
Примечания
https://www.openwall.com/lists/oss-security/2022/06/08/6
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-30522
https://github.com/apache/httpd/commit/db47781128e42bd49f55076665b3f6ca4e2bc5e2
https://github.com/apache/httpd/commit/96c75bba15b6ce20eb8d34aad717a046c000b233
EPSS
Связанные уязвимости
If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may be very large, mod_sed may make excessively large memory allocations and trigger an abort.
If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may be very large, mod_sed may make excessively large memory allocations and trigger an abort.
If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may be very large, mod_sed may make excessively large memory allocations and trigger an abort.
If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may be very large, mod_sed may make excessively large memory allocations and trigger an abort.
Уязвимость фильтра содержимого mod_sed веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать отказ в обслуживании
EPSS