Red Hat Security Advisory

RHSA-2022:1173

httpd security update

Released 2022-04-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 6 ELS) httpd-2.2.15-70.el6_10, httpd-devel-2.2.15-70.el6_10, httpd-manual-2.2.15-70.el6_10 +2

Fixes 1 record

TI-2022-06970 CVE-2022-22720 · GHSA-2hwm-6xjf-3xmx

HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier

HIGH 65

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.28189 Published 2022-03-14 Partial fix CWE-444