CVE-2022-23943
Description
Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.
Risk Information
Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
65.081
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2022-22719,CVE-2022-22720,CVE-2022-22721,CVE-2022-23943 are fixed in Apache Apache 2.4.53 | Windows |
| Multiple vulnerabilities are affected in Oracle HTTP Server 12.2.1.3.0 | Windows |
| Multiple vulnerabilities are affected in Oracle HTTP Server 12.2.1.4.0 | Windows |
| SUSE-SU-2022:0928-1(SUSE Linux Enterprise Server 12-SP5 ) apache2-2.4.51-35.13.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0928-1(SUSE Linux Enterprise Server 12-SP5 ) apache2-debuginfo-2.4.51-35.13.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0928-1(SUSE Linux Enterprise Server 12-SP5 ) apache2-debugsource-2.4.51-35.13.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0928-1(SUSE Linux Enterprise Server 12-SP5 ) apache2-doc-2.4.51-35.13.1.noarch.rpm | Linux |
| SUSE-SU-2022:0928-1(SUSE Linux Enterprise Server 12-SP5 ) apache2-example-pages-2.4.51-35.13.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0928-1(SUSE Linux Enterprise Server 12-SP5 ) apache2-prefork-2.4.51-35.13.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0928-1(SUSE Linux Enterprise Server 12-SP5 ) apache2-prefork-debuginfo-2.4.51-35.13.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0928-1(SUSE Linux Enterprise Server 12-SP5 ) apache2-utils-2.4.51-35.13.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0928-1(SUSE Linux Enterprise Server 12-SP5 ) apache2-utils-debuginfo-2.4.51-35.13.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0928-1(SUSE Linux Enterprise Server 12-SP5 ) apache2-worker-2.4.51-35.13.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0928-1(SUSE Linux Enterprise Server 12-SP5 ) apache2-worker-debuginfo-2.4.51-35.13.1.x86_64.rpm | Linux |
| (RHSA-2022:8067) httpd security, bug fix, and enhancement update httpd-2.4.53-7.el9.x86_64.rpm | Linux |
| (RHSA-2022:8067) httpd security, bug fix, and enhancement update httpd-core-2.4.53-7.el9.x86_64.rpm | Linux |
| (RHSA-2022:8067) httpd security, bug fix, and enhancement update httpd-debugsource-2.4.53-7.el9.x86_64.rpm | Linux |
| (RHSA-2022:8067) httpd security, bug fix, and enhancement update httpd-devel-2.4.53-7.el9.x86_64.rpm | Linux |
| (RHSA-2022:8067) httpd security, bug fix, and enhancement update httpd-filesystem-2.4.53-7.el9.noarch.rpm | Linux |
| (RHSA-2022:8067) httpd security, bug fix, and enhancement update httpd-manual-2.4.53-7.el9.noarch.rpm | Linux |
| (RHSA-2022:8067) httpd security, bug fix, and enhancement update httpd-tools-2.4.53-7.el9.x86_64.rpm | Linux |
| (RHSA-2022:8067) httpd security, bug fix, and enhancement update mod_ldap-2.4.53-7.el9.x86_64.rpm | Linux |
| (RHSA-2022:8067) httpd security, bug fix, and enhancement update mod_lua-2.4.53-7.el9.x86_64.rpm | Linux |
| (RHSA-2022:8067) httpd security, bug fix, and enhancement update mod_proxy_html-2.4.53-7.el9.x86_64.rpm | Linux |
| (RHSA-2022:8067) httpd security, bug fix, and enhancement update mod_session-2.4.53-7.el9.x86_64.rpm | Linux |
| (RHSA-2022:8067) httpd security, bug fix, and enhancement update mod_ssl-2.4.53-7.el9.x86_64.rpm | Linux |
| Vulnerabilities CVE-2022-22719,CVE-2022-22720,CVE-2022-22721,CVE-2022-23943 are fixed in Apache Apache 2.4.53 (For Linux) | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234