Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-23943

Fixed in a distro release EPSS 50%

Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.

Published 2022-03-14 · CVE record · OSV

Products: Apache Software Foundation Apache HTTP Server

Distro releases

ReleasePackageFixed in
AlmaLinux:8httpd2.4.37-51.module_el8.7.0+3281+01e58653
AlmaLinux:8httpd-devel2.4.37-51.module_el8.7.0+3281+01e58653
AlmaLinux:8httpd-filesystem2.4.37-51.module_el8.7.0+3281+01e58653
AlmaLinux:8httpd-manual2.4.37-51.module_el8.7.0+3281+01e58653
AlmaLinux:8httpd-tools2.4.37-51.module_el8.7.0+3281+01e58653
AlmaLinux:8mod_http21.15.7-5.module_el8.6.0+2872+fe0ff7aa
AlmaLinux:8mod_http21.15.7-5.module_el8.6.0+3031+fb177b09
AlmaLinux:8mod_ldap2.4.37-51.module_el8.7.0+3281+01e58653
AlmaLinux:8mod_md1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa
AlmaLinux:8mod_md1:2.0.8-8.module_el8.6.0+3031+fb177b09
AlmaLinux:8mod_proxy_html1:2.4.37-51.module_el8.7.0+3281+01e58653
AlmaLinux:8mod_session2.4.37-51.module_el8.7.0+3281+01e58653
AlmaLinux:8mod_ssl1:2.4.37-51.module_el8.7.0+3281+01e58653
AlmaLinux:9httpd2.4.53-7.el9
AlmaLinux:9httpd-core2.4.53-7.el9
AlmaLinux:9httpd-devel2.4.53-7.el9
AlmaLinux:9httpd-filesystem2.4.53-7.el9
AlmaLinux:9httpd-manual2.4.53-7.el9
AlmaLinux:9httpd-tools2.4.53-7.el9
AlmaLinux:9mod_ldap2.4.53-7.el9
AlmaLinux:9mod_lua2.4.53-7.el9
AlmaLinux:9mod_proxy_html1:2.4.53-7.el9
AlmaLinux:9mod_session2.4.53-7.el9
AlmaLinux:9mod_ssl1:2.4.53-7.el9
Alpine:v3.12apache22.4.53-r0
Alpine:v3.13apache22.4.53-r0
Alpine:v3.14apache22.4.53-r0
Alpine:v3.15apache22.4.53-r0
Alpine:v3.16apache22.4.53-r0
Alpine:v3.17apache22.4.53-r0
Alpine:v3.18apache22.4.53-r0
Alpine:v3.19apache22.4.53-r0
Alpine:v3.20apache22.4.53-r0
Alpine:v3.21apache22.4.53-r0
Alpine:v3.22apache22.4.53-r0
Alpine:v3.23apache22.4.53-r0
Alpine:v3.24apache22.4.53-r0
Debian:12apache22.4.53-1
Debian:13apache22.4.53-1
Debian:14apache22.4.53-1
Debian:9apache22.4.25-3+deb9u13
Red Hat:enterprise_linux:8httpd0:2.4.37-51.module+el8.7.0+16050+02173b8e
Red Hat:enterprise_linux:8httpd-debuginfo0:2.4.37-51.module+el8.7.0+16050+02173b8e
Red Hat:enterprise_linux:8httpd-debugsource0:2.4.37-51.module+el8.7.0+16050+02173b8e
Red Hat:enterprise_linux:8httpd-devel0:2.4.37-51.module+el8.7.0+16050+02173b8e
Red Hat:enterprise_linux:8httpd-filesystem0:2.4.37-51.module+el8.7.0+16050+02173b8e
Red Hat:enterprise_linux:8httpd-manual0:2.4.37-51.module+el8.7.0+16050+02173b8e
Red Hat:enterprise_linux:8httpd-tools0:2.4.37-51.module+el8.7.0+16050+02173b8e
Red Hat:enterprise_linux:8httpd-tools-debuginfo0:2.4.37-51.module+el8.7.0+16050+02173b8e
Red Hat:enterprise_linux:8mod_http20:1.15.7-5.module+el8.6.0+13996+01710940
Red Hat:enterprise_linux:8mod_http2-debuginfo0:1.15.7-5.module+el8.6.0+13996+01710940
Red Hat:enterprise_linux:8mod_http2-debugsource0:1.15.7-5.module+el8.6.0+13996+01710940
Red Hat:enterprise_linux:8mod_ldap0:2.4.37-51.module+el8.7.0+16050+02173b8e
Red Hat:enterprise_linux:8mod_ldap-debuginfo0:2.4.37-51.module+el8.7.0+16050+02173b8e
Red Hat:enterprise_linux:8mod_md1:2.0.8-8.module+el8.3.0+6814+67d1e611
Red Hat:enterprise_linux:8mod_md-debuginfo1:2.0.8-8.module+el8.3.0+6814+67d1e611
Red Hat:enterprise_linux:8mod_md-debugsource1:2.0.8-8.module+el8.3.0+6814+67d1e611
Red Hat:enterprise_linux:8mod_proxy_html1:2.4.37-51.module+el8.7.0+16050+02173b8e
Red Hat:enterprise_linux:8mod_proxy_html-debuginfo1:2.4.37-51.module+el8.7.0+16050+02173b8e
Red Hat:enterprise_linux:8mod_session0:2.4.37-51.module+el8.7.0+16050+02173b8e
Red Hat:enterprise_linux:8mod_session-debuginfo0:2.4.37-51.module+el8.7.0+16050+02173b8e
Red Hat:enterprise_linux:8mod_ssl1:2.4.37-51.module+el8.7.0+16050+02173b8e
Red Hat:enterprise_linux:8mod_ssl-debuginfo1:2.4.37-51.module+el8.7.0+16050+02173b8e
Red Hat:enterprise_linux:9httpd0:2.4.53-7.el9
Red Hat:enterprise_linux:9httpd-core0:2.4.53-7.el9
Red Hat:enterprise_linux:9httpd-core-debuginfo0:2.4.53-7.el9
Red Hat:enterprise_linux:9httpd-debuginfo0:2.4.53-7.el9
Red Hat:enterprise_linux:9httpd-debugsource0:2.4.53-7.el9
Red Hat:enterprise_linux:9httpd-devel0:2.4.53-7.el9
Red Hat:enterprise_linux:9httpd-filesystem0:2.4.53-7.el9
Red Hat:enterprise_linux:9httpd-manual0:2.4.53-7.el9
Red Hat:enterprise_linux:9httpd-tools0:2.4.53-7.el9
Red Hat:enterprise_linux:9httpd-tools-debuginfo0:2.4.53-7.el9
Red Hat:enterprise_linux:9mod_ldap0:2.4.53-7.el9
Red Hat:enterprise_linux:9mod_ldap-debuginfo0:2.4.53-7.el9
Red Hat:enterprise_linux:9mod_lua0:2.4.53-7.el9
Red Hat:enterprise_linux:9mod_lua-debuginfo0:2.4.53-7.el9
Red Hat:enterprise_linux:9mod_proxy_html1:2.4.53-7.el9
Red Hat:enterprise_linux:9mod_proxy_html-debuginfo1:2.4.53-7.el9
Red Hat:enterprise_linux:9mod_session0:2.4.53-7.el9
Red Hat:enterprise_linux:9mod_session-debuginfo0:2.4.53-7.el9
Red Hat:enterprise_linux:9mod_ssl1:2.4.53-7.el9
Red Hat:enterprise_linux:9mod_ssl-debuginfo1:2.4.53-7.el9
Red Hat:jboss_core_services:1jbcs-httpd24-curl0:7.86.0-2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-curl0:7.86.0-2.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-curl-debuginfo0:7.86.0-2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-curl-debuginfo0:7.86.0-2.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd0:2.4.51-37.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd0:2.4.51-37.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-debuginfo0:2.4.51-37.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-debuginfo0:2.4.51-37.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-devel0:2.4.51-37.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-devel0:2.4.51-37.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-manual0:2.4.51-37.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-manual0:2.4.51-37.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-selinux0:2.4.51-37.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-selinux0:2.4.51-37.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-tools0:2.4.51-37.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-tools0:2.4.51-37.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-tools-debuginfo0:2.4.51-37.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl0:7.86.0-2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl0:7.86.0-2.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl-debuginfo0:7.86.0-2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl-devel0:7.86.0-2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl-devel0:7.86.0-2.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_http20:1.15.19-20.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_http20:1.15.19-20.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_http2-debuginfo0:1.15.19-20.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_http2-debuginfo0:1.15.19-20.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_ldap0:2.4.51-37.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_ldap0:2.4.51-37.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_ldap-debuginfo0:2.4.51-37.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_proxy_html1:2.4.51-37.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_proxy_html1:2.4.51-37.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_proxy_html-debuginfo1:2.4.51-37.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_session0:2.4.51-37.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_session0:2.4.51-37.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_session-debuginfo0:2.4.51-37.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_ssl1:2.4.51-37.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_ssl1:2.4.51-37.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_ssl-debuginfo1:2.4.51-37.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl1:1.1.1k-13.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl1:1.1.1k-13.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-debuginfo1:1.1.1k-13.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-debuginfo1:1.1.1k-13.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-devel1:1.1.1k-13.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-devel1:1.1.1k-13.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-libs1:1.1.1k-13.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-libs1:1.1.1k-13.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-libs-debuginfo1:1.1.1k-13.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-perl1:1.1.1k-13.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-perl1:1.1.1k-13.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-static1:1.1.1k-13.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-static1:1.1.1k-13.el8jbcs
Red Hat:rhel_software_collections:3httpd24-httpd0:2.4.34-23.el7.5
Red Hat:rhel_software_collections:3httpd24-httpd-debuginfo0:2.4.34-23.el7.5
Red Hat:rhel_software_collections:3httpd24-httpd-devel0:2.4.34-23.el7.5
Red Hat:rhel_software_collections:3httpd24-httpd-manual0:2.4.34-23.el7.5
Red Hat:rhel_software_collections:3httpd24-httpd-tools0:2.4.34-23.el7.5
Red Hat:rhel_software_collections:3httpd24-mod_ldap0:2.4.34-23.el7.5
Red Hat:rhel_software_collections:3httpd24-mod_proxy_html1:2.4.34-23.el7.5
Red Hat:rhel_software_collections:3httpd24-mod_session0:2.4.34-23.el7.5
Red Hat:rhel_software_collections:3httpd24-mod_ssl1:2.4.34-23.el7.5
Rocky Linux:8httpd0:2.4.37-51.module+el8.7.0+1059+126e9251
Rocky Linux:8mod_http20:1.15.7-5.module+el8.6.0+823+f143cee1
Rocky Linux:8mod_md1:2.0.8-8.module+el8.5.0+695+1fa8055e
Rocky Linux:8mod_md1:2.0.8-8.module+el8.4.0+553+7a69454b
Rocky Linux:9httpd0:2.4.53-7.el9
SUSE:Enterprise Storage 6apache22.4.33-150000.3.66.1
SUSE:Enterprise Storage 7apache22.4.51-150200.3.42.1
SUSE:HPE Helion OpenStack 8apache22.4.23-29.88.1
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSapache22.4.33-150000.3.66.1
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSapache22.4.33-150000.3.66.1
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOSapache22.4.51-150200.3.42.1
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSapache22.4.51-150200.3.42.1
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSapache22.4.66-150400.6.57.1
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSapache22.4.66-150400.6.57.1
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSapache22.4.66-150400.6.57.1
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSapache22.4.66-150400.6.57.1
SUSE:Linux Enterprise High Performance Computing 15-ESPOSapache22.4.33-150000.3.66.1
SUSE:Linux Enterprise High Performance Computing 15-LTSSapache22.4.33-150000.3.66.1
SUSE:Linux Enterprise Module for Basesystem 15 SP3apache22.4.51-150200.3.42.1
SUSE:Linux Enterprise Module for Package Hub 15 SP3apache22.4.51-150200.3.42.1
SUSE:Linux Enterprise Module for Server Applications 15 SP3apache22.4.51-150200.3.42.1
SUSE:Linux Enterprise Real Time 15 SP2apache22.4.51-150200.3.42.1
SUSE:Linux Enterprise Server 12 SP2-BCLapache22.4.23-29.88.1
SUSE:Linux Enterprise Server 12 SP3-BCLapache22.4.23-29.88.1
SUSE:Linux Enterprise Server 12 SP3-LTSSapache22.4.23-29.88.1
SUSE:Linux Enterprise Server 12 SP4-LTSSapache22.4.23-29.88.1
SUSE:Linux Enterprise Server 12 SP5apache22.4.51-35.13.1
SUSE:Linux Enterprise Server 15 SP1-BCLapache22.4.33-150000.3.66.1
SUSE:Linux Enterprise Server 15 SP1-LTSSapache22.4.33-150000.3.66.1
SUSE:Linux Enterprise Server 15 SP2-BCLapache22.4.51-150200.3.42.1
SUSE:Linux Enterprise Server 15 SP2-LTSSapache22.4.51-150200.3.42.1
SUSE:Linux Enterprise Server 15 SP4-LTSSapache22.4.66-150400.6.57.1
SUSE:Linux Enterprise Server 15 SP5-LTSSapache22.4.66-150400.6.57.1
SUSE:Linux Enterprise Server 15-LTSSapache22.4.33-150000.3.66.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP3apache22.4.23-29.88.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP4apache22.4.23-29.88.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP5apache22.4.51-35.13.1
SUSE:Linux Enterprise Server for SAP Applications 15apache22.4.33-150000.3.66.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP1apache22.4.33-150000.3.66.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP2apache22.4.51-150200.3.42.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP4apache22.4.66-150400.6.57.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP5apache22.4.66-150400.6.57.1
SUSE:Linux Enterprise Software Development Kit 12 SP5apache22.4.51-35.13.1
SUSE:Manager Proxy 4.1apache22.4.51-150200.3.42.1
SUSE:Manager Retail Branch Server 4.1apache22.4.51-150200.3.42.1
SUSE:Manager Server 4.1apache22.4.51-150200.3.42.1
SUSE:OpenStack Cloud 8apache22.4.23-29.88.1
SUSE:OpenStack Cloud 9apache22.4.23-29.88.1
SUSE:OpenStack Cloud Crowbar 8apache22.4.23-29.88.1
SUSE:OpenStack Cloud Crowbar 9apache22.4.23-29.88.1
Ubuntu:18.04:LTSapache22.4.29-1ubuntu4.22
Ubuntu:20.04:LTSapache22.4.41-4ubuntu3.10
Ubuntu:22.04:LTSapache22.4.52-1ubuntu2
Ubuntu:Pro:14.04:LTSapache22.4.7-1ubuntu4.22+esm4
Ubuntu:Pro:16.04:LTSapache22.4.18-2ubuntu3.17+esm5
openSUSE:Leap 15.3apache22.4.51-150200.3.42.1
openSUSE:Tumbleweedapache22.4.53-1.1