Related Vulnerabilities: CVE-2022-22719  

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.

Description

The MITRE CVE dictionary describes this issue as:

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.

Additional Information

  • Bugzilla 2064322: CVE-2022-22719 httpd: mod_lua Use of uninitialized value of in r:parsebody
  • CWE-665: Improper Initialization
  • FAQ: Frequently asked questions about CVE-2022-22719