Advisory details:
apache_httpd / CVE-2022-22721
| Advisory ID | apache_httpd/CVE-2022-22721 |
| Aliases | |
| Summary | If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| CWE-190 | Integer Overflow or Wraparound |
| System | Score | Found at |
|---|---|---|
| apache_httpd | low |
| Reference id | Reference type | URL |
|---|---|---|
| CVE-2022-22721 | https://httpd.apache.org/security/json/CVE-2022-22721.json |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
There are no SSVC decisions available.