VDB
GHSA-24r7-x8mx-hc2h
GHSA-24r7-x8mx-hc2h
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Record from GitHub Advisory Database · Published March 15, 2022
If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier.
Risk scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Timeline
- Mar 15, 2022 CVE Published
- Apr 30, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-24r7-x8mx-hc2h
vulnetix vdb fixes GHSA-24r7-x8mx-hc2hOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-24r7-x8mx-hc2h/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2022-22721 advisory
- https://security.gentoo.org/glsa/202208-20 url
- https://security.netapp.com/advisory/ntap-20220321-0001 url
- https://support.apple.com/kb/HT213257 url
- http://seclists.org/fulldisclosure/2022/May/33 url
- http://seclists.org/fulldisclosure/2022/May/38 url
- https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD url
- https://support.apple.com/kb/HT213255 url
- https://support.apple.com/kb/HT213256 url
- https://www.oracle.com/security-alerts/cpuapr2022.html url
- https://www.oracle.com/security-alerts/cpujul2022.html url
- http://seclists.org/fulldisclosure/2022/May/35 url
- http://www.openwall.com/lists/oss-security/2022/03/14/2 url
- https://httpd.apache.org/security/vulnerabilities_24.html url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO url