ALPINE-CVE-2022-22720
ALPINE-CVE-2022-22720
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling
CVSS 9.8 · Critical · Fix available
- Published
- Updated
Stack: system
Affected products and versions
apache2 Alpine:v3.12
- Affected ranges
- ECOSYSTEM: < 2.4.53-r0
Update to 2.4.53-r0
apache2 Alpine:v3.13
- Affected ranges
- ECOSYSTEM: < 2.4.53-r0
Update to 2.4.53-r0
apache2 Alpine:v3.14
- Affected ranges
- ECOSYSTEM: < 2.4.53-r0
Update to 2.4.53-r0
apache2 Alpine:v3.15
- Affected ranges
- ECOSYSTEM: < 2.4.53-r0
Update to 2.4.53-r0
apache2 Alpine:v3.16
- Affected ranges
- ECOSYSTEM: < 2.4.53-r0
Update to 2.4.53-r0
apache2 Alpine:v3.17
- Affected ranges
- ECOSYSTEM: < 2.4.53-r0
Update to 2.4.53-r0
apache2 Alpine:v3.18
- Affected ranges
- ECOSYSTEM: < 2.4.53-r0
Update to 2.4.53-r0
apache2 Alpine:v3.19
- Affected ranges
- ECOSYSTEM: < 2.4.53-r0
Update to 2.4.53-r0
apache2 Alpine:v3.20
- Affected ranges
- ECOSYSTEM: < 2.4.53-r0
Update to 2.4.53-r0
apache2 Alpine:v3.21
- Affected ranges
- ECOSYSTEM: < 2.4.53-r0
Update to 2.4.53-r0
apache2 Alpine:v3.22
- Affected ranges
- ECOSYSTEM: < 2.4.53-r0
Update to 2.4.53-r0
apache2 Alpine:v3.23
- Affected ranges
- ECOSYSTEM: < 2.4.53-r0
Update to 2.4.53-r0
apache2 Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 2.4.53-r0
Update to 2.4.53-r0