CVE-2022-22719

CVE-2022-22719: mod_lua Use of uninitialized value of in r:parsebody

Vendor Apache Software Foundation

Product Apache HTTP Server

Weakness CWE-665

Published March 14, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.

Key dates

02Disclosure timeline

March 14, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-22719 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/665.html

Related vulnerabilities

04Related CVE

CVE-2023-27325 Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability CVE-2023-27324 Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability CVE-2021-0234 Junos OS: QFX5100-96S: DDoS protection does not work as expected. CVE-2025-22834 ThirdPartyVideo SetVariable Vulnerability CVE-2025-21100