CVE-2022-36760 — Apache HTTP Server: mod_proxy_ajp Possible request smuggling

Affected: Apache Software Foundation Apache HTTP Server

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.

USN-5834-1 — apache2 vulnerabilities

Affected: Ubuntu:Pro:16.04:LTS: apache2

It was discovered that the Apache HTTP Server mod_dav module did not properly handle specially crafted request headers. A remote attacker could possibly use this issue to cause the process to crash, leading to a denial of service. (CVE-2006-20001)

It was discovered that the Apache HTTP Server mod_proxy_ajp module did not properly handle certain invalid Transfer-Encoding headers. A remote attacker could possibly use this issue to perform an HTTP Request Smuggling attack. (CVE-2022-36760)

Most recent entries from all

CVE-2022-36760 — Apache HTTP Server: mod_proxy_ajp Possible request smuggling

USN-5834-1 — apache2 vulnerabilities