Vulnerability-Lookup

RHSA-2023:0852

Vulnerability from csaf_opensuse - Published: 2023-02-21 00:00 - Updated: 2026-09-20 11:26

Summary

security update for httpd

Severity

Moderate

Notes

Title of the patch: security update for httpd

Description of the patch: This security update provides a functional equivalent of RHSA-2023:0852. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2023:0852.

Patchnames: RHSA-2023:0852

CVE-2006-20001

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 11 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 8:httpd-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:httpd-devel-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:httpd-filesystem-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:httpd-manual-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:httpd-tools-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64::httpd:2.4	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:mod_ldap-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:mod_proxy_html-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:mod_session-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:mod_ssl-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4	—	Vendor Fix

Threats

Impact important

CVE-2022-36760

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

Affected products

Recommended 11 products, the same list as for CVE-2006-20001

Threats

Impact moderate

CVE-2022-37436

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Recommended 11 products, the same list as for CVE-2006-20001

Threats

Impact important

References

12 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://www.suse.com/security/cve/CVE-2006-20001/	self
https://www.suse.com/security/cve/CVE-2022-36760/	self
https://www.suse.com/security/cve/CVE-2022-37436/	self
https://www.suse.com/security/cve/CVE-2006-20001	external
https://bugzilla.suse.com/1207247	external
https://bugzilla.suse.com/1217021	external
https://www.suse.com/security/cve/CVE-2022-36760	external
https://bugzilla.suse.com/1207250	external
https://www.suse.com/security/cve/CVE-2022-37436	external
https://bugzilla.suse.com/1207251	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for httpd",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2023:0852.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2023:0852.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2023:0852",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2023_0852.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2006-20001 page",
        "url": "https://www.suse.com/security/cve/CVE-2006-20001/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-36760 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-36760/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-37436 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-37436/"
      }
    ],
    "title": "security update for httpd",
    "tracking": {
      "current_release_date": "2026-09-20T11:26:37Z",
      "generator": {
        "date": "2023-02-21T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2023:0852",
      "initial_release_date": "2023-02-21T00:00:00Z",
      "revision_history": [
        {
          "date": "2023-02-21T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T11:26:37Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-filesystem-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
                "product": {
                  "name": "httpd-filesystem-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch (httpd:2.4)",
                  "product_id": "httpd-filesystem-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/httpd-filesystem@2.4.37-51.module+el8.7.0+18026+7b169787.1?arch=noarch\u0026rpmmod=httpd:2.4:8000020230221235643:rhel8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-manual-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
                "product": {
                  "name": "httpd-manual-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch (httpd:2.4)",
                  "product_id": "httpd-manual-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/httpd-manual@2.4.37-51.module+el8.7.0+18026+7b169787.1?arch=noarch\u0026rpmmod=httpd:2.4:8000020230221235643:rhel8"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
                "product": {
                  "name": "httpd-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64 (httpd:2.4)",
                  "product_id": "httpd-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/httpd@2.4.37-51.module+el8.7.0+18026+7b169787.1?arch=x86_64\u0026rpmmod=httpd:2.4:8000020230221235643:rhel8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
                "product": {
                  "name": "httpd-devel-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64 (httpd:2.4)",
                  "product_id": "httpd-devel-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/httpd-devel@2.4.37-51.module+el8.7.0+18026+7b169787.1?arch=x86_64\u0026rpmmod=httpd:2.4:8000020230221235643:rhel8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
                "product": {
                  "name": "httpd-tools-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64 (httpd:2.4)",
                  "product_id": "httpd-tools-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/httpd-tools@2.4.37-51.module+el8.7.0+18026+7b169787.1?arch=x86_64\u0026rpmmod=httpd:2.4:8000020230221235643:rhel8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64 (httpd:2.4)",
                  "product_id": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mod_http2@1.15.7-5.module+el8.6.0+13996+01710940?arch=x86_64\u0026rpmmod=httpd:2.4:8070020221108161709:rhel8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_ldap-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64 (httpd:2.4)",
                  "product_id": "mod_ldap-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mod_ldap@2.4.37-51.module+el8.7.0+18026+7b169787.1?arch=x86_64\u0026rpmmod=httpd:2.4:8000020230221235643:rhel8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64 (httpd:2.4)",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mod_md@2.0.8-8.module+el8.3.0+6814+67d1e611?arch=x86_64\u0026rpmmod=httpd:2.4:8000020230912110926:rhel8\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64 (httpd:2.4)",
                  "product_id": "mod_proxy_html-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mod_proxy_html@2.4.37-51.module+el8.7.0+18026+7b169787.1?arch=x86_64\u0026rpmmod=httpd:2.4:8000020230221235643:rhel8\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_session-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64 (httpd:2.4)",
                  "product_id": "mod_session-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mod_session@2.4.37-51.module+el8.7.0+18026+7b169787.1?arch=x86_64\u0026rpmmod=httpd:2.4:8000020230221235643:rhel8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_ssl-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64 (httpd:2.4)",
                  "product_id": "mod_ssl-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mod_ssl@2.4.37-51.module+el8.7.0+18026+7b169787.1?arch=x86_64\u0026rpmmod=httpd:2.4:8000020230221235643:rhel8\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 8",
                "product": {
                  "name": "SUSE Liberty Linux 8",
                  "product_id": "SUSE Liberty Linux 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:httpd-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4"
        },
        "product_reference": "httpd-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:httpd-devel-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4"
        },
        "product_reference": "httpd-devel-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-filesystem-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:httpd-filesystem-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4"
        },
        "product_reference": "httpd-filesystem-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-manual-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:httpd-manual-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4"
        },
        "product_reference": "httpd-manual-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:httpd-tools-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4"
        },
        "product_reference": "httpd-tools-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64::httpd:2.4 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64::httpd:2.4"
        },
        "product_reference": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64::httpd:2.4",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:mod_ldap-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4"
        },
        "product_reference": "mod_ldap-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:mod_proxy_html-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:mod_session-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4"
        },
        "product_reference": "mod_session-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:mod_ssl-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4"
        },
        "product_reference": "mod_ssl-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2006-20001",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2006-20001"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash.\n\nThis issue affects Apache HTTP Server 2.4.54 and earlier.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:httpd-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:httpd-devel-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:httpd-filesystem-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
          "SUSE Liberty Linux 8:httpd-manual-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
          "SUSE Liberty Linux 8:httpd-tools-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_ldap-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_proxy_html-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_session-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_ssl-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2006-20001",
          "url": "https://www.suse.com/security/cve/CVE-2006-20001"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1207247 for CVE-2006-20001",
          "url": "https://bugzilla.suse.com/1207247"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217021 for CVE-2006-20001",
          "url": "https://bugzilla.suse.com/1217021"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:httpd-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-devel-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-filesystem-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-manual-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-tools-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_ldap-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_proxy_html-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_session-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_ssl-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:httpd-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-devel-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-filesystem-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-manual-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-tools-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_ldap-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_proxy_html-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_session-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_ssl-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-02-21T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2006-20001"
    },
    {
      "cve": "CVE-2022-36760",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-36760"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request Smuggling\u0027) vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to.  This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:httpd-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:httpd-devel-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:httpd-filesystem-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
          "SUSE Liberty Linux 8:httpd-manual-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
          "SUSE Liberty Linux 8:httpd-tools-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_ldap-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_proxy_html-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_session-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_ssl-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-36760",
          "url": "https://www.suse.com/security/cve/CVE-2022-36760"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1207250 for CVE-2022-36760",
          "url": "https://bugzilla.suse.com/1207250"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:httpd-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-devel-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-filesystem-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-manual-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-tools-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_ldap-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_proxy_html-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_session-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_ssl-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:httpd-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-devel-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-filesystem-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-manual-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-tools-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_ldap-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_proxy_html-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_session-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_ssl-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-02-21T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-36760"
    },
    {
      "cve": "CVE-2022-37436",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-37436"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:httpd-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:httpd-devel-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:httpd-filesystem-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
          "SUSE Liberty Linux 8:httpd-manual-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
          "SUSE Liberty Linux 8:httpd-tools-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_ldap-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_proxy_html-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_session-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
          "SUSE Liberty Linux 8:mod_ssl-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-37436",
          "url": "https://www.suse.com/security/cve/CVE-2022-37436"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1207251 for CVE-2022-37436",
          "url": "https://bugzilla.suse.com/1207251"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:httpd-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-devel-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-filesystem-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-manual-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-tools-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_ldap-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_proxy_html-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_session-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_ssl-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:httpd-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-devel-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-filesystem-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-manual-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.noarch::httpd:2.4",
            "SUSE Liberty Linux 8:httpd-tools-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_ldap-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_proxy_html-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_session-0:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4",
            "SUSE Liberty Linux 8:mod_ssl-1:2.4.37-51.module+el8.7.0+18026+7b169787.1.x86_64::httpd:2.4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-02-21T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-37436"
    }
  ]
}

CVE-2006-20001 (GCVE-0-2006-20001)

Vulnerability from cvelistv5 – Published: 2023-01-17 19:07 – Updated: 2025-02-13 16:27

Title

Apache HTTP Server: mod_dav out of bounds read, or write of zero byte

Summary

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-01 15:32 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

apache mitre root Scorecard

References

3 references

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory
https://security.gentoo.org/glsa/202309-01
https://security.netapp.com/advisory/ntap-2023031…

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 2.4 , ≤ 2.4.54 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T20:57:41.059Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20230316-0005/"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202309-01"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2006-20001",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-01T15:32:06.669346Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-01T15:32:39.476Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.4.54",
              "status": "affected",
              "version": "2.4",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash.\u003cbr\u003e\u003cbr\u003eThis issue affects Apache HTTP Server 2.4.54 and earlier.\u003cbr\u003e"
            }
          ],
          "value": "A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash.\n\nThis issue affects Apache HTTP Server 2.4.54 and earlier."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "moderate"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-08T21:06:27.122Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        },
        {
          "url": "https://security.gentoo.org/glsa/202309-01"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2006-10-31T09:00:00.000Z",
          "value": "Described in first edition of \"The Art of Software Security Assessment\""
        },
        {
          "lang": "en",
          "time": "2022-08-10T12:00:00.000Z",
          "value": "Reported to security team"
        }
      ],
      "title": "Apache HTTP Server: mod_dav out of  bounds read, or write of zero byte",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2006-20001",
    "datePublished": "2023-01-17T19:07:27.136Z",
    "dateReserved": "2022-09-01T14:24:05.065Z",
    "dateUpdated": "2025-02-13T16:27:07.996Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-36760 (GCVE-0-2022-36760)

Vulnerability from cvelistv5 – Published: 2023-01-17 19:11 – Updated: 2025-04-04 18:08

Title

Apache HTTP Server: mod_proxy_ajp Possible request smuggling

Summary

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.

Severity

9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-04 18:07 UTC

CWE

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Assigner

apache mitre root Scorecard

References

2 references

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory
https://security.gentoo.org/glsa/202309-01

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 2.4 , ≤ 2.4.54 (semver)

Credits

ZeddYu_Lu from Qi'anxin Research Institute of Legendsec at Qi'anxin Group

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T10:14:28.094Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202309-01"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-36760",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-04T18:07:18.055286Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-444",
                "description": "CWE-444 Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-04T18:08:02.696Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.4.54",
              "status": "affected",
              "version": "2.4",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "ZeddYu_Lu from Qi\u0027anxin Research Institute of Legendsec at Qi\u0027anxin Group"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request Smuggling\u0027) vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to.  This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions."
            }
          ],
          "value": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request Smuggling\u0027) vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to.  This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "moderate"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-444",
              "description": "CWE-444 Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request Smuggling\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-08T21:06:22.161Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        },
        {
          "url": "https://security.gentoo.org/glsa/202309-01"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2022-07-12T11:00:00.000Z",
          "value": "Reported to security team"
        }
      ],
      "title": "Apache HTTP Server: mod_proxy_ajp Possible request smuggling",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2022-36760",
    "datePublished": "2023-01-17T19:11:55.106Z",
    "dateReserved": "2022-07-25T12:18:16.655Z",
    "dateUpdated": "2025-04-04T18:08:02.696Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-37436 (GCVE-0-2022-37436)

Vulnerability from cvelistv5 – Published: 2023-01-17 19:12 – Updated: 2025-04-04 18:06

Title

Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting

Summary

Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-04 18:06 UTC

CWE

CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers
CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

Assigner

apache mitre root Scorecard

References

2 references

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory
https://security.gentoo.org/glsa/202309-01

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 0 , < 2.4.55 (semver)

Credits

Dimas Fariski Setyawan Putra (@nyxsorcerer)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T10:29:20.979Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202309-01"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-37436",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-04T18:06:04.365341Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-113",
                "description": "CWE-113 Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-04T18:06:37.763Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThan": "2.4.55",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Dimas Fariski Setyawan Putra (@nyxsorcerer)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client."
            }
          ],
          "value": "Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "moderate"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-113",
              "description": "CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-08T21:06:23.773Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        },
        {
          "url": "https://security.gentoo.org/glsa/202309-01"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2022-07-14T06:22:00.000Z",
          "value": "Reported to security team"
        }
      ],
      "title": "Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2022-37436",
    "datePublished": "2023-01-17T19:12:59.968Z",
    "dateReserved": "2022-08-05T12:37:59.731Z",
    "dateUpdated": "2025-04-04T18:06:37.763Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2023:0852

CVE-2006-20001 (GCVE-0-2006-20001)

CVE-2022-36760 (GCVE-0-2022-36760)

CVE-2022-37436 (GCVE-0-2022-37436)

Tags

Sightings

Nomenclature

Related by attack behaviour