Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2022-23943)

Description

Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.

Remediation

References

CVE-2022-23943

Related Vulnerabilities

WordPress Plugin Gravity Forms Information Disclosure (2.4.8)

WordPress Plugin Content Audit Multiple Vulnerabilities (1.9.1)

Moodle Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-5153)

Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-1944)

WordPress Plugin Real Media Library:Media Library Folder & File Manager Cross-Site Scripting (4.14.1)

Severity

Critical

Classification

CVE-2022-23943 CWE-787 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N