CVE-2022-23943

CVE-2022-23943: mod_sed: Read/write beyond bounds

Vendor Apache Software Foundation
Product Apache HTTP Server
Weakness CWE-787
Published March 14, 2022
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.

Key dates

02Disclosure timeline

March 14, 2022 CVE published
August 3, 2024 Record updated