NetSight
IP …
critical9.1

CVE-2022-22721

If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out o…

Impact

If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier.

Affected products

VendorProductAffected versions
ApacheHttp Server
through 2.4.52
FedoraprojectFedora
Versions 34, 35, 36
DebianDebian Linux
Version 9.0
OracleEnterprise Manager Ops Center
Version 12.4.0.0
OracleHttp Server
Versions 12.2.1.3.0, 12.2.1.4.0
OracleZfs Storage Appliance Kit
Version 8.8
AppleMac Os X
from 10.15 before 10.15.7
Version 10.15.7
AppleMacos
from 11.0 before 11.6.6
from 12.0 before 12.4

Weakness classification

CWE-190

References