Attestkeep
Sprache: Deutsch
Loslegen

Schwachstellen / CVE-2022-31813

kritisch

CVE-2022-31813

httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism

Veröffentlicht Geändert CWE 348, 345
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.

Einstufung nach Quelle

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Bitnami9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Bitnami, Photon OS. Niedriger laut Amazon (hoch), Oracle (hoch), Red Hat (mittel), AlmaLinux (mittel), Rocky Linux (mittel), Ubuntu (mittel).

Beschreibung

Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism. This may be used to bypass IP based authentication on the origin server/application.

Betroffene Pakete und behobene Versionen

QuellePaketBehoben in
bitnami::Bitnami Vulnerability Databaseapache2.4.54
Photon OS 2.0httpd2.4.54-1.ph2
Photon OS 3.0httpd2.4.54-1.ph3
Photon OS 4.0httpd, httpd-devel, httpd-docs und 1 weitere2.4.54-1.ph4
alma 8httpd:2.4::httpd, httpd:2.4::httpd-devel, httpd:2.4::httpd-filesystem und 8 weitere2.4.37-51.module_el8.7.0+3281+01e58653 und 3 weitere
alma 9httpd, httpd-core, httpd-devel und 8 weitere2.4.53-7.el9 und 1 weitere
alpine 3.13apache22.4.54-r0
alpine 3.14apache22.4.54-r0
alpine 3.15apache22.4.54-r0
alpine 3.16apache22.4.54-r0
alpine 3.17apache22.4.54-r0
alpine 3.18apache22.4.54-r0
Alle 209 Einträge aus 51 Quellen zeigen
QuellePaketBehoben in
bitnami::Bitnami Vulnerability Databaseapache2.4.54
Photon OS 2.0httpd2.4.54-1.ph2
Photon OS 3.0httpd2.4.54-1.ph3
Photon OS 4.0httpd2.4.54-1.ph4
Photon OS 4.0httpd-devel2.4.54-1.ph4
Photon OS 4.0httpd-docs2.4.54-1.ph4
Photon OS 4.0httpd-tools2.4.54-1.ph4
alma 8httpd:2.4::httpd2.4.37-51.module_el8.7.0+3281+01e58653
alma 8httpd:2.4::httpd-devel2.4.37-51.module_el8.7.0+3281+01e58653
alma 8httpd:2.4::httpd-filesystem2.4.37-51.module_el8.7.0+3281+01e58653
alma 8httpd:2.4::httpd-manual2.4.37-51.module_el8.7.0+3281+01e58653
alma 8httpd:2.4::httpd-tools2.4.37-51.module_el8.7.0+3281+01e58653
alma 8httpd:2.4::mod_http21.15.7-5.module_el8.6.0+2872+fe0ff7aa
alma 8httpd:2.4::mod_ldap2.4.37-51.module_el8.7.0+3281+01e58653
alma 8httpd:2.4::mod_md1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa
alma 8httpd:2.4::mod_proxy_html1:2.4.37-51.module_el8.7.0+3281+01e58653
alma 8httpd:2.4::mod_session2.4.37-51.module_el8.7.0+3281+01e58653
alma 8httpd:2.4::mod_ssl1:2.4.37-51.module_el8.7.0+3281+01e58653
alma 9httpd2.4.53-7.el9
alma 9httpd-core2.4.53-7.el9
alma 9httpd-devel2.4.53-7.el9
alma 9httpd-filesystem2.4.53-7.el9
alma 9httpd-manual2.4.53-7.el9
alma 9httpd-tools2.4.53-7.el9
alma 9mod_ldap2.4.53-7.el9
alma 9mod_lua2.4.53-7.el9
alma 9mod_proxy_html1:2.4.53-7.el9
alma 9mod_session2.4.53-7.el9
alma 9mod_ssl1:2.4.53-7.el9
alpine 3.13apache22.4.54-r0
alpine 3.14apache22.4.54-r0
alpine 3.15apache22.4.54-r0
alpine 3.16apache22.4.54-r0
alpine 3.17apache22.4.54-r0
alpine 3.18apache22.4.54-r0
alpine 3.19apache22.4.54-r0
alpine 3.20apache22.4.54-r0
alpine 3.21apache22.4.54-r0
alpine 3.22apache22.4.54-r0
alpine 3.23apache22.4.54-r0
alpine 3.24apache22.4.54-r0
alpine edgeapache22.4.54-r0
amazon linux 1httpd242.4.54-1.98.amzn1
amazon linux 1httpd24-debuginfo2.4.54-1.98.amzn1
amazon linux 1httpd24-devel2.4.54-1.98.amzn1
amazon linux 1httpd24-manual2.4.54-1.98.amzn1
amazon linux 1httpd24-tools2.4.54-1.98.amzn1
amazon linux 1mod24_ldap2.4.54-1.98.amzn1
amazon linux 1mod24_md2.4.54-1.98.amzn1
amazon linux 1mod24_proxy_html1:2.4.54-1.98.amzn1
amazon linux 1mod24_session2.4.54-1.98.amzn1
amazon linux 1mod24_ssl1:2.4.54-1.98.amzn1
amazon linux 2httpd2.4.54-1.amzn2
amazon linux 2httpd-debuginfo2.4.54-1.amzn2
amazon linux 2httpd-devel2.4.54-1.amzn2
amazon linux 2httpd-filesystem2.4.54-1.amzn2
amazon linux 2httpd-manual2.4.54-1.amzn2
amazon linux 2httpd-tools2.4.54-1.amzn2
amazon linux 2mod_ldap2.4.54-1.amzn2
amazon linux 2mod_md2.4.54-1.amzn2
amazon linux 2mod_proxy_html1:2.4.54-1.amzn2
amazon linux 2mod_session2.4.54-1.amzn2
amazon linux 2mod_ssl1:2.4.54-1.amzn2
amazon linux 2022httpd2.4.54-3.amzn2022.0.3
amazon linux 2022httpd-core2.4.54-3.amzn2022.0.3
amazon linux 2022httpd-core-debuginfo2.4.54-3.amzn2022.0.3
amazon linux 2022httpd-debuginfo2.4.54-3.amzn2022.0.3
amazon linux 2022httpd-debugsource2.4.54-3.amzn2022.0.3
amazon linux 2022httpd-devel2.4.54-3.amzn2022.0.3
amazon linux 2022httpd-filesystem2.4.54-3.amzn2022.0.3
amazon linux 2022httpd-manual2.4.54-3.amzn2022.0.3
amazon linux 2022httpd-tools2.4.54-3.amzn2022.0.3
amazon linux 2022httpd-tools-debuginfo2.4.54-3.amzn2022.0.3
amazon linux 2022mod_ldap2.4.54-3.amzn2022.0.3
amazon linux 2022mod_ldap-debuginfo2.4.54-3.amzn2022.0.3
amazon linux 2022mod_lua2.4.54-3.amzn2022.0.3
amazon linux 2022mod_lua-debuginfo2.4.54-3.amzn2022.0.3
amazon linux 2022mod_proxy_html1:2.4.54-3.amzn2022.0.3
amazon linux 2022mod_proxy_html-debuginfo1:2.4.54-3.amzn2022.0.3
amazon linux 2022mod_session2.4.54-3.amzn2022.0.3
amazon linux 2022mod_session-debuginfo2.4.54-3.amzn2022.0.3
amazon linux 2022mod_ssl1:2.4.54-3.amzn2022.0.3
amazon linux 2022mod_ssl-debuginfo1:2.4.54-3.amzn2022.0.3
amazon linux 2023httpd2.4.54-3.amzn2023.0.4
amazon linux 2023httpd-core2.4.54-3.amzn2023.0.4
amazon linux 2023httpd-core-debuginfo2.4.54-3.amzn2023.0.4
amazon linux 2023httpd-debuginfo2.4.54-3.amzn2023.0.4
amazon linux 2023httpd-debugsource2.4.54-3.amzn2023.0.4
amazon linux 2023httpd-devel2.4.54-3.amzn2023.0.4
amazon linux 2023httpd-filesystem2.4.54-3.amzn2023.0.4
amazon linux 2023httpd-manual2.4.54-3.amzn2023.0.4
amazon linux 2023httpd-tools2.4.54-3.amzn2023.0.4
amazon linux 2023httpd-tools-debuginfo2.4.54-3.amzn2023.0.4
amazon linux 2023mod_ldap2.4.54-3.amzn2023.0.4
amazon linux 2023mod_ldap-debuginfo2.4.54-3.amzn2023.0.4
amazon linux 2023mod_lua2.4.54-3.amzn2023.0.4
amazon linux 2023mod_lua-debuginfo2.4.54-3.amzn2023.0.4
amazon linux 2023mod_proxy_html1:2.4.54-3.amzn2023.0.4
amazon linux 2023mod_proxy_html-debuginfo1:2.4.54-3.amzn2023.0.4
amazon linux 2023mod_session2.4.54-3.amzn2023.0.4
amazon linux 2023mod_session-debuginfo2.4.54-3.amzn2023.0.4
amazon linux 2023mod_ssl1:2.4.54-3.amzn2023.0.4
amazon linux 2023mod_ssl-debuginfo1:2.4.54-3.amzn2023.0.4
debian 10apache22.4.38-3+deb10u8
debian 11apache22.4.54-1~deb11u1
debian 12apache22.4.54-1
debian 13apache22.4.54-1
debian 14apache22.4.54-1
echoapache22.4.54-1
Oracle Linux 6httpd2.2.15-69.0.4.el6
Oracle Linux 6httpd-devel2.2.15-69.0.4.el6
Oracle Linux 6httpd-manual2.2.15-69.0.4.el6
Oracle Linux 6httpd-tools2.2.15-69.0.4.el6
Oracle Linux 6mod_ssl1:2.2.15-69.0.4.el6
Oracle Linux 7httpd2.4.6-97.0.7.el7_9.5
Oracle Linux 7httpd-devel2.4.6-97.0.7.el7_9.5
Oracle Linux 7httpd-manual2.4.6-97.0.7.el7_9.5
Oracle Linux 7httpd-tools2.4.6-97.0.7.el7_9.5
Oracle Linux 7mod_ldap2.4.6-97.0.7.el7_9.5
Oracle Linux 7mod_proxy_html1:2.4.6-97.0.7.el7_9.5
Oracle Linux 7mod_session2.4.6-97.0.7.el7_9.5
Oracle Linux 7mod_ssl1:2.4.6-97.0.7.el7_9.5
Oracle Linux 8httpd2.4.37-51.0.1.module+el8.7.0+20778+02173b8e
Oracle Linux 8httpd-devel2.4.37-51.0.1.module+el8.7.0+20778+02173b8e
Oracle Linux 8httpd-filesystem2.4.37-51.0.1.module+el8.7.0+20778+02173b8e
Oracle Linux 8httpd-manual2.4.37-51.0.1.module+el8.7.0+20778+02173b8e
Oracle Linux 8httpd-tools2.4.37-51.0.1.module+el8.7.0+20778+02173b8e
Oracle Linux 8mod_http21.15.7-5.module+el8.6.0+20548+01710940
Oracle Linux 8mod_ldap2.4.37-51.0.1.module+el8.7.0+20778+02173b8e
Oracle Linux 8mod_md1:2.0.8-8.module+el8.5.0+20475+4f6a8fd5
Oracle Linux 8mod_proxy_html1:2.4.37-51.0.1.module+el8.7.0+20778+02173b8e
Oracle Linux 8mod_session2.4.37-51.0.1.module+el8.7.0+20778+02173b8e
Oracle Linux 8mod_ssl1:2.4.37-51.0.1.module+el8.7.0+20778+02173b8e
Oracle Linux 9httpd2.4.53-7.0.1.el9
Oracle Linux 9httpd-core2.4.53-7.0.1.el9
Oracle Linux 9httpd-devel2.4.53-7.0.1.el9
Oracle Linux 9httpd-filesystem2.4.53-7.0.1.el9
Oracle Linux 9httpd-manual2.4.53-7.0.1.el9
Oracle Linux 9httpd-tools2.4.53-7.0.1.el9
Oracle Linux 9mod_ldap2.4.53-7.0.1.el9
Oracle Linux 9mod_lua2.4.53-7.0.1.el9
Oracle Linux 9mod_proxy_html1:2.4.53-7.0.1.el9
Oracle Linux 9mod_session2.4.53-7.0.1.el9
Oracle Linux 9mod_ssl1:2.4.53-7.0.1.el9
rapidfort Oracle Linux 9httpd0:2.4.51-7.0.2.el9_0
rapidfort Oracle Linux 9httpd-devel0:2.4.51-7.0.2.el9_0
rapidfort Oracle Linux 9httpd-filesystem0:2.4.51-7.0.2.el9_0
rapidfort Oracle Linux 9httpd-manual0:2.4.51-7.0.2.el9_0
rapidfort Oracle Linux 9httpd-tools0:2.4.51-7.0.2.el9_0
rapidfort Oracle Linux 9mod_ldap0:2.4.51-7.0.2.el9_0
rapidfort Oracle Linux 9mod_lua0:2.4.51-7.0.2.el9_0
rapidfort Oracle Linux 9mod_proxy_html1:2.4.51-7.0.2.el9_0
rapidfort Oracle Linux 9mod_session0:2.4.51-7.0.2.el9_0
rapidfort Oracle Linux 9mod_ssl1:2.4.51-7.0.2.el9_0
rapidfort ubuntu 20.04apache20:2.4.52-1ubuntu4.1
rapidfort ubuntu 20.04rf-apache20:2.4.52-1ubuntu4.1
rapidfort ubuntu 22.04apache20:2.4.52-1ubuntu4.1
rapidfort ubuntu 22.04rf-apache20:2.4.52-1ubuntu4.1
rapidfort ubuntu 24.04apache20:2.4.52-1ubuntu4.1
rapidfort ubuntu 24.04rf-apache20:2.4.52-1ubuntu4.1
Red Hathttpdkein Fix angegeben
Red Hathttpd-develkein Fix angegeben
Red Hathttpd-manualkein Fix angegeben
Red Hathttpd-toolskein Fix angegeben
Red Hathttpd24kein Fix angegeben
Red Hathttpd24-develkein Fix angegeben
Red Hathttpd24-manualkein Fix angegeben
Red Hathttpd24-toolskein Fix angegeben
Red Hatmod_ldapkein Fix angegeben
Red Hatmod_ldap24kein Fix angegeben
Red Hatmod_proxy24_htmlkein Fix angegeben
Red Hatmod_proxy_htmlkein Fix angegeben
Red Hatmod_sessionkein Fix angegeben
Red Hatmod_session24kein Fix angegeben
Red Hatmod_sslkein Fix angegeben
Red Hatmod_ssl24kein Fix angegeben
rocky 8httpd:2.4::httpd2.4.37-51.module+el8.7.0+1059+126e9251
rocky 8httpd:2.4::httpd-devel2.4.37-51.module+el8.7.0+1059+126e9251
rocky 8httpd:2.4::httpd-filesystem2.4.37-51.module+el8.7.0+1059+126e9251
rocky 8httpd:2.4::httpd-manual2.4.37-51.module+el8.7.0+1059+126e9251
rocky 8httpd:2.4::httpd-tools2.4.37-51.module+el8.7.0+1059+126e9251
rocky 8httpd:2.4::mod_http21.15.7-5.module+el8.6.0+823+f143cee1
rocky 8httpd:2.4::mod_ldap2.4.37-51.module+el8.7.0+1059+126e9251
rocky 8httpd:2.4::mod_md1:2.0.8-8.module+el8.5.0+695+1fa8055e
rocky 8httpd:2.4::mod_proxy_html1:2.4.37-51.module+el8.7.0+1059+126e9251
rocky 8httpd:2.4::mod_session2.4.37-51.module+el8.7.0+1059+126e9251
rocky 8httpd:2.4::mod_ssl1:2.4.37-51.module+el8.7.0+1059+126e9251
rocky 9httpd2.4.53-7.el9
rocky 9httpd-core2.4.53-7.el9
rocky 9httpd-devel2.4.53-7.el9
rocky 9httpd-filesystem2.4.53-7.el9
rocky 9httpd-manual2.4.53-7.el9
rocky 9httpd-tools2.4.53-7.el9
rocky 9mod_ldap2.4.53-7.el9
rocky 9mod_lua2.4.53-7.el9
rocky 9mod_proxy_html1:2.4.53-7.el9
rocky 9mod_session2.4.53-7.el9
rocky 9mod_ssl1:2.4.53-7.el9
root.io debian 12rootio-apache22.4.54-1
root.io debian 13rootio-apache22.4.54-1
ubuntu 14.04-ESMapache22.4.7-1ubuntu4.22+esm8
ubuntu 16.04-ESMapache22.4.18-2ubuntu3.17+esm6
ubuntu 18.04apache22.4.29-1ubuntu4.24
ubuntu 18.04-ESMapache22.4.29-1ubuntu4.24
ubuntu 20.04apache22.4.41-4ubuntu3.12
ubuntu 20.04-ESMapache22.4.41-4ubuntu3.12
ubuntu 21.10apache22.4.48-3.1ubuntu3.5
ubuntu 22.04apache22.4.52-1ubuntu4.1
ubuntu 22.10apache22.4.54-2ubuntu1

Referenzen

Alle 55 Referenzen

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.