ALINUX2-SA-2022%3A0018

ALINUX2-SA-2022%3A0018 PUBLISHED CVSS 7.099999904632568 HIGH

Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2022-22720: Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

Risk Scores

CVSS 3.1

7.099999904632568

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Affected Products

Vendor	Product	Versions
Alibaba Cloud	httpd

Timeline

Mar 30, 2022 CVE Published
Mar 30, 2022 CVE Updated

References

ALINUX2-SA-2022:0018: httpd security update (Important) advisory
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22720 advisory

Open in Interactive Console →