Bug 2064319 (CVE-2022-23943)

Summary:	CVE-2022-23943 httpd: mod_sed: Read/write beyond bounds
Product:	[Other] Security Response	Reporter:	Patrick Del Bello <pdelbell>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	high	Docs Contact:
Priority:	high
Version:	unspecified	CC:	anon.amish, asoldano, bbaranow, bmaxwell, brian.stansberry, caswilli, cdewolf, chazlett, christoph.karl, csutherl, darran.lofthouse, dkreling, dosoudil, fjansen, fjuma, gsuckevi, gzaronik, hhorak, icesalov, iweiss, jburrell, jclere, jkaluza, jkoehler, jochrist, jorton, jwong, jwon, kaycoth, kyoshida, lgao, luhliari, micjohns, mosmerov, mschena, msochure, msvehla, mturk, nwallace, pjindal, pmackay, rstancel, rsvoboda, security-response-team, shipatil, sid, smaestri, sthirugn, szappis, tom.jenkinson, yozone
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	httpd 2.4.53	Doc Type:	If docs needed, set a value
Doc Text:	An out-of-bounds read/write vulnerability was found in the mod_sed module of httpd. This flaw allows an attacker to overwrite the memory of an httpd instance that is using mod_sed with data provided by the attacker.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-12-10 13:33:03 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2064568, 2065253, 2065254, 2065255, 2065256, 2065257, 2065258, 2065259, 2065260, 2065261, 2065262, 2065263, 2065264, 2065324, 2066263, 2066265
Bug Blocks:	2064323

Description Patrick Del Bello 2022-03-15 14:33:52 UTC

Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.

References:
https://httpd.apache.org/security/vulnerabilities_24.html
https://www.openwall.com/lists/oss-security/2022/03/14/1

Comment 2 Sandipan Roy 2022-03-16 07:41:52 UTC

Created httpd tracking bugs for this issue:

Affects: fedora-all [bug 2064568]

Comment 5 Mauro Matteo Cascella 2022-03-17 14:08:22 UTC

Upstream patches:
https://svn.apache.org/viewvc?view=revision&revision=r1898695
https://svn.apache.org/viewvc?view=revision&revision=r1898772

Comment 14 errata-xmlrpc 2022-09-29 13:32:45 UTC

This issue has been addressed in the following products:

  Red Hat Software Collections for Red Hat Enterprise Linux 7

Via RHSA-2022:6753 https://access.redhat.com/errata/RHSA-2022:6753

Comment 16 errata-xmlrpc 2022-11-08 09:59:30 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2022:7647 https://access.redhat.com/errata/RHSA-2022:7647

Comment 17 errata-xmlrpc 2022-11-15 10:08:19 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2022:8067 https://access.redhat.com/errata/RHSA-2022:8067

Comment 18 errata-xmlrpc 2022-12-08 13:06:46 UTC

This issue has been addressed in the following products:

  JBoss Core Services on RHEL 7
  JBoss Core Services for RHEL 8

Via RHSA-2022:8840 https://access.redhat.com/errata/RHSA-2022:8840

Comment 19 errata-xmlrpc 2022-12-08 13:21:20 UTC

This issue has been addressed in the following products:

  Red Hat JBoss Core Services

Via RHSA-2022:8841 https://access.redhat.com/errata/RHSA-2022:8841

Comment 20 Product Security DevOps Team 2022-12-10 13:32:59 UTC

This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2022-23943