Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 SP1 security update

Fixed packages 51

Vulnerabilities 17

• Critical 9.8
  CVE-2022-1292 Public exploit EPSS 83%

  The c_rehash script allows command injection

  The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitra…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux
  May 3, 2022
• Critical 9.8
  CVE-2022-2068 EPSS 96%

  The c_rehash script allows command injection

  In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux
  Jun 21, 2022
• Critical 9.8
  CVE-2022-32207 EPSS 12%

  When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the…

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Jul 7, 2022
• Critical 9.8
  CVE-2022-32221

  When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data …

  curl curl curl tensorflow Debian Ubuntu Azure Linux Alpine Wolfi
  Dec 5, 2022
• Critical 9.1
  CVE-2022-28615

  Read beyond bounds in ap_strcmp_match()

  Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, third-party…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Jun 8, 2022
• High 8.1
  CVE-2022-42915

  curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it se…

  curl curl curl tensorflow Debian Ubuntu Azure Linux Alpine
  Oct 29, 2022
• High 7.5
  CVE-2022-27781

  libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's …

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Jun 1, 2022
• High 7.5
  CVE-2022-42916

  In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, cur…

  curl curl curl tensorflow Debian Ubuntu Azure Linux Alpine Wolfi
  Oct 29, 2022
• Medium 6.5
  CVE-2022-32206 EPSS 36%

  curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple …

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Jul 7, 2022
• Medium 5.9
  CVE-2022-32208

  When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw make…

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Jul 7, 2022
• Low 3.7
  CVE-2022-35252

  When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when …

  curl curl curl curl Debian Ubuntu Azure Linux Alpine
  Sep 23, 2022
• Unscored —
  CVE-2022-22721 EPSS 42%

  core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody

  If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Mar 14, 2022
• Unscored —
  CVE-2022-23943 Public exploit EPSS 50%

  mod_sed: Read/write beyond bounds

  Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Mar 14, 2022
• Unscored —
  CVE-2022-26377 Public exploit EPSS 21%

  mod_proxy_ajp: Possible request smuggling

  Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Se…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Jun 8, 2022
• Unscored —
  CVE-2022-28614

  read beyond bounds via ap_rwrite()

  The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using ap_rwrite() or ap_rputs(), such as with mod_luas r:puts() function. Modules compiled and distrib…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Jun 8, 2022
• Unscored —
  CVE-2022-30522 EPSS 90%

  mod_sed denial of service

  If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may be very large, mod_sed may make excessively large memory allocations and trigger an abort.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Jun 8, 2022
• Unscored —
  CVE-2022-31813 Public exploit

  mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism

  Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism. This may be used to bypass IP based authentication on the origin server/application.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Jun 8, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2064319
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2064320
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2081494
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2082204
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2094997
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2095002
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2095006
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2095015
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2095020
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2097310
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2099300
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2099305
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2099306
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2120718
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2135411
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2135413
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2135416
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8840.json
• report
  https://access.redhat.com/security/cve/CVE-2022-1292
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-1292
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-1292
• article
  https://www.openssl.org/news/secadv/20220503.txt
• report
  https://access.redhat.com/security/cve/CVE-2022-2068
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2068
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2068
• article
  https://www.openssl.org/news/secadv/20220621.txt
• report
  https://access.redhat.com/security/cve/CVE-2022-22721
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-22721
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-22721
• article
  https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-22721
• report
  https://access.redhat.com/security/cve/CVE-2022-23943
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-23943
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-23943
• article
  https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-23943
• report
  https://access.redhat.com/security/cve/CVE-2022-26377
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-26377
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-26377
• article
  https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-26377