CVE-2022-22720: apache software foundation apache http server HTTP Request/Response Smuggling

CVSS: 9.8v3.1CriticalModified

AliasesALPINE-CVE-2022-22720RHSA-2022:1045RHSA-2022:1049+7 more

Published 14-03-2022Last modified 03-08-2024

Vulnerability summary

CVE-2022-22720 is a critical (CVSS 9.8) HTTP Request/Response Smuggling vulnerability in apache software foundation apache http server. EPSS estimates a 28.19% chance of exploitation in the next 30 days, higher than 98% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.1 (NVD)

EPSS score

28.19%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 17 · Related 10

DLA-2960-1 MGASA-2022-0105 OPENSUSE-SU-2022:1031-1 OPENSUSE-SU-2024:11919-1 RHSA-2022:1136 RHSA-2022:1137+11 more

Timeline

14-03-2022
PublishedVulnerability first disclosed.
03-08-2024
Last modifiedVulnerability information updated.

Description

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

CVSS metrics

6 scores · 5 sources · 2 versions

v3.19.8v2.07.5

EPSS trend

Probability

28.19%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 28.19% on 18-09-2026

18-09-202618-10-2026

EPSS score

28.19%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

Affected systems

Redhat31 products

httpd< 0:2.4.6-97.el7_9.5 | < 0:2.4.37-43.module+el8.5.0+14530+6f259f31.3 | < 0:2.4.37-39.module+el8.4.0+14531+e1b94dfe.4 | < 0:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 0:2.4.37-21.module+el8.2.0+14532+bd4c0f23.4 | < 0:2.2.15-70.el6_10
httpd-debuginfo< 0:2.4.6-97.el7_9.5 | < 0:2.4.37-43.module+el8.5.0+14530+6f259f31.3 | < 0:2.4.37-39.module+el8.4.0+14531+e1b94dfe.4 | < 0:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 0:2.4.37-21.module+el8.2.0+14532+bd4c0f23.4 | < 0:2.2.15-70.el6_10
httpd-debugsource< 0:2.4.37-43.module+el8.5.0+14530+6f259f31.3 | < 0:2.4.37-39.module+el8.4.0+14531+e1b94dfe.4 | < 0:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 0:2.4.37-21.module+el8.2.0+14532+bd4c0f23.4
httpd-devel< 0:2.4.6-97.el7_9.5 | < 0:2.4.37-43.module+el8.5.0+14530+6f259f31.3 | < 0:2.4.37-39.module+el8.4.0+14531+e1b94dfe.4 | < 0:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 0:2.4.37-21.module+el8.2.0+14532+bd4c0f23.4 | < 0:2.2.15-70.el6_10
httpd-filesystem< 0:2.4.37-43.module+el8.5.0+14530+6f259f31.3 | < 0:2.4.37-39.module+el8.4.0+14531+e1b94dfe.4 | < 0:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 0:2.4.37-21.module+el8.2.0+14532+bd4c0f23.4

httpd-manual< 0:2.4.6-97.el7_9.5 | < 0:2.4.37-43.module+el8.5.0+14530+6f259f31.3 | < 0:2.4.37-39.module+el8.4.0+14531+e1b94dfe.4 | < 0:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 0:2.4.37-21.module+el8.2.0+14532+bd4c0f23.4 | < 0:2.2.15-70.el6_10
httpd-tools< 0:2.4.6-97.el7_9.5 | < 0:2.4.37-43.module+el8.5.0+14530+6f259f31.3 | < 0:2.4.37-39.module+el8.4.0+14531+e1b94dfe.4 | < 0:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 0:2.4.37-21.module+el8.2.0+14532+bd4c0f23.4 | < 0:2.2.15-70.el6_10
httpd-tools-debuginfo< 0:2.4.37-43.module+el8.5.0+14530+6f259f31.3 | < 0:2.4.37-39.module+el8.4.0+14531+e1b94dfe.4 | < 0:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 0:2.4.37-21.module+el8.2.0+14532+bd4c0f23.4
httpd24-httpd< 0:2.4.34-23.el7.2
httpd24-httpd-debuginfo< 0:2.4.34-23.el7.2
httpd24-httpd-devel< 0:2.4.34-23.el7.2
httpd24-httpd-manual< 0:2.4.34-23.el7.2
httpd24-httpd-tools< 0:2.4.34-23.el7.2
httpd24-mod_ldap< 0:2.4.34-23.el7.2
httpd24-mod_proxy_html< 1:2.4.34-23.el7.2
httpd24-mod_session< 0:2.4.34-23.el7.2
httpd24-mod_ssl< 1:2.4.34-23.el7.2
mod_http2< 0:1.15.7-3.module+el8.4.0+8625+d397f3da | < 0:1.11.3-3.module+el8.1.0+7763+babdfe5b.1 | < 0:1.11.3-3.module+el8.2.0+7758+84b4ca3e.1
mod_http2-debuginfo< 0:1.15.7-3.module+el8.4.0+8625+d397f3da | < 0:1.11.3-3.module+el8.1.0+7763+babdfe5b.1 | < 0:1.11.3-3.module+el8.2.0+7758+84b4ca3e.1
mod_http2-debugsource< 0:1.15.7-3.module+el8.4.0+8625+d397f3da | < 0:1.11.3-3.module+el8.1.0+7763+babdfe5b.1 | < 0:1.11.3-3.module+el8.2.0+7758+84b4ca3e.1
mod_ldap< 0:2.4.6-97.el7_9.5 | < 0:2.4.37-43.module+el8.5.0+14530+6f259f31.3 | < 0:2.4.37-39.module+el8.4.0+14531+e1b94dfe.4 | < 0:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 0:2.4.37-21.module+el8.2.0+14532+bd4c0f23.4
mod_ldap-debuginfo< 0:2.4.37-43.module+el8.5.0+14530+6f259f31.3 | < 0:2.4.37-39.module+el8.4.0+14531+e1b94dfe.4 | < 0:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 0:2.4.37-21.module+el8.2.0+14532+bd4c0f23.4
mod_md< 1:2.0.8-8.module+el8.3.0+6814+67d1e611 | < 0:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 1:2.0.8-7.module+el8.2.0+5531+7e4d69a2
mod_md-debuginfo< 1:2.0.8-8.module+el8.3.0+6814+67d1e611 | < 0:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 1:2.0.8-7.module+el8.2.0+5531+7e4d69a2
mod_md-debugsource< 1:2.0.8-8.module+el8.3.0+6814+67d1e611 | < 1:2.0.8-7.module+el8.2.0+5531+7e4d69a2
mod_proxy_html< 1:2.4.6-97.el7_9.5 | < 1:2.4.37-43.module+el8.5.0+14530+6f259f31.3 | < 1:2.4.37-39.module+el8.4.0+14531+e1b94dfe.4 | < 1:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 1:2.4.37-21.module+el8.2.0+14532+bd4c0f23.4
mod_proxy_html-debuginfo< 1:2.4.37-43.module+el8.5.0+14530+6f259f31.3 | < 1:2.4.37-39.module+el8.4.0+14531+e1b94dfe.4 | < 1:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 1:2.4.37-21.module+el8.2.0+14532+bd4c0f23.4
mod_session< 0:2.4.6-97.el7_9.5 | < 0:2.4.37-43.module+el8.5.0+14530+6f259f31.3 | < 0:2.4.37-39.module+el8.4.0+14531+e1b94dfe.4 | < 0:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 0:2.4.37-21.module+el8.2.0+14532+bd4c0f23.4
mod_session-debuginfo< 0:2.4.37-43.module+el8.5.0+14530+6f259f31.3 | < 0:2.4.37-39.module+el8.4.0+14531+e1b94dfe.4 | < 0:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 0:2.4.37-21.module+el8.2.0+14532+bd4c0f23.4
mod_ssl< 1:2.4.6-97.el7_9.5 | < 1:2.4.37-43.module+el8.5.0+14530+6f259f31.3 | < 1:2.4.37-39.module+el8.4.0+14531+e1b94dfe.4 | < 1:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 1:2.4.37-21.module+el8.2.0+14532+bd4c0f23.4 | < 1:2.2.15-70.el6_10
mod_ssl-debuginfo< 1:2.4.37-43.module+el8.5.0+14530+6f259f31.3 | < 1:2.4.37-39.module+el8.4.0+14531+e1b94dfe.4 | < 1:2.4.37-16.module+el8.1.0+14533+ac5a4716.4 | < 1:2.4.37-21.module+el8.2.0+14532+bd4c0f23.4

Show all 31

Oracle3 products

Apple2 products

mac_os_x10.15.7:security_update_2020-001 | 10.15.7:security_update_2021-001 | 10.15.7:security_update_2021-002 | 10.15.7:security_update_2021-003 | 10.15.7:security_update_2021-004 | 10.15.7:security_update_2021-005 | 10.15.7:security_update_2021-006 | 10.15.7:security_update_2021-007 | 10.15.7:security_update_2021-008 | 10.15.7:security_update_2022-001 | 10.15.7:security_update_2022-002 | 10.15.7:security_update_2022-003
macos< 10.15.7 | ≥ 11.0, < 11.6.6 | ≥ 12.0, ≤ 12.4

Debian2 products

apache2< 2.4.53-1
debian_linuxEOL9.0

Alpine1 product

apache2< 2.4.53-r0

Apache1 product

http_server≤ 2.4.52

Apache software foundation1 product

apache http server≥ Apache HTTP Server 2.4, ≤ 2.4.52

Fedoraproject1 product

fedoraEOL34 | 35 | 36

Ubuntu1 product

apache2< 2.4.7-1ubuntu4.22+esm4 | < 2.4.18-2ubuntu3.17+esm5 | < 2.4.29-1ubuntu4.22 | < 2.4.41-4ubuntu3.10 | < 2.4.52-1ubuntu2

9 vendors · 43 products

References

41 links

httpd.apache.org/security/vulnerabilities_24.htmlX Refsource MISCREPORTVendor Advisory
www.openwall.com/lists/oss-security/2022/03/14/3Mailing ListX Refsource MLISTThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
lists.debian.org/debian-lts-announce/2022/03/msg00033.htmlMailing ListX Refsource MLISTThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
www.oracle.com/security-alerts/cpuapr2022.htmlX Refsource MISCPatchThird Party Advisory
security.netapp.com/advisory/ntap-20220321-0001/X Refsource CONFIRMThird Party Advisory
seclists.org/fulldisclosure/2022/May/33Mailing ListX Refsource FULLDISCThird Party Advisory
seclists.org/fulldisclosure/2022/May/35Mailing ListX Refsource FULLDISCThird Party Advisory

Show all 41 references

seclists.org/fulldisclosure/2022/May/38Mailing ListX Refsource FULLDISCThird Party Advisory
www.oracle.com/security-alerts/cpujul2022.htmlX Refsource MISCThird Party Advisory
support.apple.com/kb/HT213257X Refsource CONFIRMThird Party Advisory
support.apple.com/kb/HT213256X Refsource CONFIRMThird Party Advisory
support.apple.com/kb/HT213255X Refsource CONFIRMThird Party Advisory
security.gentoo.org/glsa/202208-20Vendor AdvisoryX Refsource GENTOOThird Party Advisory
security.alpinelinux.org/vuln/CVE-2022-22720Advisory
access.redhat.com/errata/RHSA-2022:1045Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2064321REPORT
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1045.jsonAdvisory
access.redhat.com/security/cve/CVE-2022-22720REPORT
www.cve.org/CVERecord?id=CVE-2022-22720AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2022-22720AdvisoryOval
httpd.apache.org/security/vulnerabilities_24.htmlARTICLE
access.redhat.com/errata/RHSA-2022:1049Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1049.jsonAdvisory
access.redhat.com/errata/RHSA-2022:1072Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1072.jsonAdvisory
access.redhat.com/errata/RHSA-2022:1075Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1075.jsonAdvisory
access.redhat.com/errata/RHSA-2022:1080Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1080.jsonAdvisory
access.redhat.com/errata/RHSA-2022:1102Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1102.jsonAdvisory
access.redhat.com/errata/RHSA-2022:1173Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1173.jsonAdvisory
ubuntu.com/security/CVE-2022-22720REPORT
ubuntu.com/security/notices/USN-5333-1Advisory
ubuntu.com/security/notices/USN-5333-2Advisory
security-tracker.debian.org/tracker/CVE-2022-22720Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities