Unscored RHSA-2022:1173 1 CVE

Red Hat Security Advisory: httpd security update

Published Sep 13, 2024 · Updated Oct 9, 2026

Ecosystem: Red Hat

Fixed packages 6

Release	Package	Fixed in
Red Hat · RHEL 6 ELS rhel_els:6	httpd	0:2.2.15-70.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	httpd-debuginfo	0:2.2.15-70.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	httpd-devel	0:2.2.15-70.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	httpd-manual	0:2.2.15-70.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	httpd-tools	0:2.2.15-70.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	mod_ssl	1:2.2.15-70.el6_10

Vulnerabilities 1

Unscored —

CVE-2022-22720 Public exploit EPSS 28%

HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine

Mar 14, 2022

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2064321
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1173.json
report
https://access.redhat.com/security/cve/CVE-2022-22720
advisory
https://www.cve.org/CVERecord?id=CVE-2022-22720
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-22720
article
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-22720