CVE-2022-22719

—

CVSS 3.1

7.5 high

EPSS

70%p99

Published

Mar 14, 2022 (Mar 14, 2022)

Modified

Jun 17, 2026

Description

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.

Vendors: apache debian fedoraproject oracle apple
Products: http server, debian linux, fedora, zfs storage appliance kit, mac os x, macos
Weakness: CWE-665
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (69.8%)

In the news2 stories

QNAP Advises Users to Update NAS Firmware to Patch Apache HTTP Vulnerabilities

The Hacker NewsApr 22, 08:15 UTC · Apr 22, 2022Vulnerability CVE-2022-22721 CVE-2022-23943 CVE-2022-22719+3 CVEs

QNAP firmware updates fix Apache HTTP vulnerabilities in its NAS

Security AffairsApr 22, 11:28 UTC · Apr 22, 2022Vulnerability CVE-2022-22721 CVE-2022-23943 CVE-2022-22719+1 CVEs