Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2022-22720 PUBLISHED CVSS 9.800000190734863 CRITICAL

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

Risk Scores

CVSS v3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.17apache22.4.17-r4, 2.4.17-r5, 2.4.17-r6
Alpine:v3.15apache22.4.6-r3, 2.4.18-r1, 2.4.18-r2
Alpine:v3.21apache22.4.25-r0, 2.4.26-r0, 2.4.27-r1
Alpine:v3.22apache20, 2.4.9-r1, 2.4.9-r0
Alpine:v3.14apache22.4.41-r0, 2.4.4-r1, 2.4.4-r0
Alpine:v3.16apache22.4.17-r3, 2.4.18-r0, 2.4.18-r1
Alpine:v3.23apache22.4.51-r0, 2.2.20-r0, 2.2.20-r0
Alpine:v3.18apache22.4.12-r1, 0, 2.2.16-r1
Alpine:v3.19apache22.4.23-r7, 2.4.9-r1, 2.4.9-r0
Alpine:v3.13apache22.2.20-r0, 2.2.16-r0, 2.2.16-r1
Alpine:v3.12apache22.2.16-r1, 2.2.16-r0, 2.4.9-r1
Alpine:v3.20apache22.2.17-r0, 2.2.16-r3, 2.2.16-r2

Timeline

References

Open in Interactive Console →