Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-23943: An out-of-bounds read/write vulnerability was found in the mod_sed module of httpd. This flaw allows an attacker to overwrite the memory of an httpd instance that is using mod_sed with data provided by the attacker. CVE-2022-22721: A flaw was found in httpd, where it incorrectly limits the value of the LimitXMLRequestBody option. This issue can lead to an integer overflow and later causes an out-of-bounds write. CVE-2022-22720: A flaw was found in httpd. The inbound connection is not closed when it fails to discard the request body, which may expose the server to HTTP request smuggling. CVE-2022-22719: A flaw was found in the mod_lua module of httpd. A crafted request body can cause a read to a random memory area due to an uninitialized value in functions called by the parsebody function. The highest treat of this vulnerability is availability.
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | httpd | 0:2.4.53-1.amzn2 |
| Amazon Linux · 2 | httpd-debuginfo | 0:2.4.53-1.amzn2 |
| Amazon Linux · 2 | httpd-devel | 0:2.4.53-1.amzn2 |
| Amazon Linux · 2 | httpd-filesystem | 0:2.4.53-1.amzn2 |
| Amazon Linux · 2 | httpd-manual | 0:2.4.53-1.amzn2 |
| Amazon Linux · 2 | httpd-tools | 0:2.4.53-1.amzn2 |
| Amazon Linux · 2 | mod_ldap | 0:2.4.53-1.amzn2 |
| Amazon Linux · 2 | mod_md | 0:2.4.53-1.amzn2 |
| Amazon Linux · 2 | mod_proxy_html | 1:2.4.53-1.amzn2 |
| Amazon Linux · 2 | mod_session | 0:2.4.53-1.amzn2 |
| Amazon Linux · 2 | mod_ssl | 1:2.4.53-1.amzn2 |
Vulnerabilities 4
-
Unscored —CVE-2022-22719 EPSS 70%
mod_lua Use of uninitialized value of in r:parsebody
A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.
-
Unscored —
HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier
Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling
-
Unscored —CVE-2022-22721 EPSS 42%
core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody
If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier.
-
Unscored —
mod_sed: Read/write beyond bounds
Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.