Red Hat Security AdvisoryRHSA-2022:0303
httpd24-httpd security update
Released 2022-01-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for RHEL Workstation(v. 7) httpd24-httpd-2.4.34-23.el7.1, httpd24-httpd-devel-2.4.34-23.el7.1, httpd24-httpd-manual-2.4.34-23.el7.1 +5
- Red Hat Software Collections for RHEL(v. 7) httpd24-httpd-2.4.34-23.el7.1, httpd24-httpd-devel-2.4.34-23.el7.1, httpd24-httpd-manual-2.4.34-23.el7.1 +5
Fixes 1 record
Priority CRITICAL 86
A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.9684 · Published 2021-12-20 · Partial fix CWE-787
