Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Brian Moussalli

Researcher fromJFrog Security Research team
#35908of 53,638
7.5Total CVSS
Vulnerabilities · 1
PT-2022-3376
7.5
2022-06-08
Apache · Apache Http Server · CVE-2022-30522
**Name of the Vulnerable Software and Affected Versions** Apache HTTP Server version 2.4.53 **Description** The issue is related to the mod sed module in Apache HTTP Server, which may make excessively large memory allocations when configured to do transformations in contexts where the input to mod sed may be very large, potentially leading to an abort. This can be exploited by a remote attacker to cause a denial of service (DoS). The vulnerability is associated with uncontrolled resource consumption. **Recommendations** For Apache HTTP Server version 2.4.53, consider disabling the mod sed module as a temporary workaround until a patch is available to prevent excessively large memory allocations and potential DoS attacks. Restrict access to contexts where the input to mod sed may be very large to minimize the risk of exploitation.