Attestkeep
Dil: Türkçe
Kayıt ol

Zafiyetler / CVE-2022-36760

kritik

CVE-2022-36760

httpd: mod_proxy_ajp: Possible request smuggling

Yayın Değişiklik CWE 444
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.

Kaynağa göre önem derecesi

NVD9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Red Hat6.5CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Bitnami9.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Bitnami, CBL-Mariner, Photon OS. Daha düşük diyenler: Amazon (yüksek), Red Hat (orta), AlmaLinux (orta), Oracle (orta), Rocky Linux (orta), Ubuntu (orta).

Açıklama

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.

Etkilenen paketler ve düzeltilmiş sürümler

KaynakPaketDüzeltildiği sürüm
bitnami::Bitnami Vulnerability Databaseapache2.4.55
CBL-Mariner 1.0httpd0:2.4.55-1.cm1
CBL-Mariner 2.0httpd0:2.4.55-1.cm2
Photon OS 3.0httpd2.4.55-1.ph3
Photon OS 4.0httpd, httpd-devel, httpd-docs ve 1 tane daha2.4.55-1.ph4
alma 8httpd:2.4::httpd, httpd:2.4::httpd-devel, httpd:2.4::httpd-filesystem ve 8 tane daha2.4.37-51.module_el8.7.0+3405+9516b832.1 ve 3 tane daha
alma 9httpd, httpd-core, httpd-devel ve 8 tane daha2.4.53-7.el9_1.1 ve 1 tane daha
alpine 3.14apache22.4.55-r0
alpine 3.15apache22.4.55-r0
alpine 3.16apache22.4.55-r0
alpine 3.17apache22.4.55-r0
alpine 3.18apache22.4.55-r0
55 kaynaktaki 195 kaydın hepsini göster
KaynakPaketDüzeltildiği sürüm
bitnami::Bitnami Vulnerability Databaseapache2.4.55
CBL-Mariner 1.0httpd0:2.4.55-1.cm1
CBL-Mariner 2.0httpd0:2.4.55-1.cm2
Photon OS 3.0httpd2.4.55-1.ph3
Photon OS 4.0httpd2.4.55-1.ph4
Photon OS 4.0httpd-devel2.4.55-1.ph4
Photon OS 4.0httpd-docs2.4.55-1.ph4
Photon OS 4.0httpd-tools2.4.55-1.ph4
alma 8httpd:2.4::httpd2.4.37-51.module_el8.7.0+3405+9516b832.1
alma 8httpd:2.4::httpd-devel2.4.37-51.module_el8.7.0+3405+9516b832.1
alma 8httpd:2.4::httpd-filesystem2.4.37-51.module_el8.7.0+3405+9516b832.1
alma 8httpd:2.4::httpd-manual2.4.37-51.module_el8.7.0+3405+9516b832.1
alma 8httpd:2.4::httpd-tools2.4.37-51.module_el8.7.0+3405+9516b832.1
alma 8httpd:2.4::mod_http21.15.7-5.module_el8.6.0+2872+fe0ff7aa
alma 8httpd:2.4::mod_ldap2.4.37-51.module_el8.7.0+3405+9516b832.1
alma 8httpd:2.4::mod_md1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa
alma 8httpd:2.4::mod_proxy_html1:2.4.37-51.module_el8.7.0+3405+9516b832.1
alma 8httpd:2.4::mod_session2.4.37-51.module_el8.7.0+3405+9516b832.1
alma 8httpd:2.4::mod_ssl1:2.4.37-51.module_el8.7.0+3405+9516b832.1
alma 9httpd2.4.53-7.el9_1.1
alma 9httpd-core2.4.53-7.el9_1.1
alma 9httpd-devel2.4.53-7.el9_1.1
alma 9httpd-filesystem2.4.53-7.el9_1.1
alma 9httpd-manual2.4.53-7.el9_1.1
alma 9httpd-tools2.4.53-7.el9_1.1
alma 9mod_ldap2.4.53-7.el9_1.1
alma 9mod_lua2.4.53-7.el9_1.1
alma 9mod_proxy_html1:2.4.53-7.el9_1.1
alma 9mod_session2.4.53-7.el9_1.1
alma 9mod_ssl1:2.4.53-7.el9_1.1
alpine 3.14apache22.4.55-r0
alpine 3.15apache22.4.55-r0
alpine 3.16apache22.4.55-r0
alpine 3.17apache22.4.55-r0
alpine 3.18apache22.4.55-r0
alpine 3.19apache22.4.55-r0
alpine 3.20apache22.4.55-r0
alpine 3.21apache22.4.55-r0
alpine 3.22apache22.4.55-r0
alpine 3.23apache22.4.55-r0
alpine 3.24apache22.4.55-r0
alpine edgeapache22.4.55-r0
amazon linux 1httpd242.4.56-1.100.amzn1
amazon linux 1httpd24-debuginfo2.4.56-1.100.amzn1
amazon linux 1httpd24-devel2.4.56-1.100.amzn1
amazon linux 1httpd24-manual2.4.56-1.100.amzn1
amazon linux 1httpd24-tools2.4.56-1.100.amzn1
amazon linux 1mod24_ldap2.4.56-1.100.amzn1
amazon linux 1mod24_md2.4.56-1.100.amzn1
amazon linux 1mod24_proxy_html1:2.4.56-1.100.amzn1
amazon linux 1mod24_session2.4.56-1.100.amzn1
amazon linux 1mod24_ssl1:2.4.56-1.100.amzn1
amazon linux 2httpd2.4.55-1.amzn2
amazon linux 2httpd-debuginfo2.4.55-1.amzn2
amazon linux 2httpd-devel2.4.55-1.amzn2
amazon linux 2httpd-filesystem2.4.55-1.amzn2
amazon linux 2httpd-manual2.4.55-1.amzn2
amazon linux 2httpd-tools2.4.55-1.amzn2
amazon linux 2mod_ldap2.4.55-1.amzn2
amazon linux 2mod_md2.4.55-1.amzn2
amazon linux 2mod_proxy_html1:2.4.55-1.amzn2
amazon linux 2mod_session2.4.55-1.amzn2
amazon linux 2mod_ssl1:2.4.55-1.amzn2
amazon linux 2023httpd2.4.55-1.amzn2023
amazon linux 2023httpd-core2.4.55-1.amzn2023
amazon linux 2023httpd-core-debuginfo2.4.55-1.amzn2023
amazon linux 2023httpd-debuginfo2.4.55-1.amzn2023
amazon linux 2023httpd-debugsource2.4.55-1.amzn2023
amazon linux 2023httpd-devel2.4.55-1.amzn2023
amazon linux 2023httpd-filesystem2.4.55-1.amzn2023
amazon linux 2023httpd-manual2.4.55-1.amzn2023
amazon linux 2023httpd-tools2.4.55-1.amzn2023
amazon linux 2023httpd-tools-debuginfo2.4.55-1.amzn2023
amazon linux 2023mod_ldap2.4.55-1.amzn2023
amazon linux 2023mod_ldap-debuginfo2.4.55-1.amzn2023
amazon linux 2023mod_lua2.4.55-1.amzn2023
amazon linux 2023mod_lua-debuginfo2.4.55-1.amzn2023
amazon linux 2023mod_proxy_html1:2.4.55-1.amzn2023
amazon linux 2023mod_proxy_html-debuginfo1:2.4.55-1.amzn2023
amazon linux 2023mod_session2.4.55-1.amzn2023
amazon linux 2023mod_session-debuginfo2.4.55-1.amzn2023
amazon linux 2023mod_ssl1:2.4.55-1.amzn2023
amazon linux 2023mod_ssl-debuginfo1:2.4.55-1.amzn2023
debian 10apache22.4.38-3+deb10u9
debian 11apache22.4.56-1~deb11u1
debian 12apache22.4.55-1
debian 13apache22.4.55-1
debian 14apache22.4.55-1
echoapache22.4.55-1
Oracle Linux 8httpd2.4.37-51.0.1.module+el8.7.0+20923+af3b70dd.1
Oracle Linux 8httpd-devel2.4.37-51.0.1.module+el8.7.0+20923+af3b70dd.1
Oracle Linux 8httpd-filesystem2.4.37-51.0.1.module+el8.7.0+20923+af3b70dd.1
Oracle Linux 8httpd-manual2.4.37-51.0.1.module+el8.7.0+20923+af3b70dd.1
Oracle Linux 8httpd-tools2.4.37-51.0.1.module+el8.7.0+20923+af3b70dd.1
Oracle Linux 8mod_http21.15.7-5.module+el8.6.0+20548+01710940
Oracle Linux 8mod_ldap2.4.37-51.0.1.module+el8.7.0+20923+af3b70dd.1
Oracle Linux 8mod_md1:2.0.8-8.module+el8.5.0+20475+4f6a8fd5
Oracle Linux 8mod_proxy_html1:2.4.37-51.0.1.module+el8.7.0+20923+af3b70dd.1
Oracle Linux 8mod_session2.4.37-51.0.1.module+el8.7.0+20923+af3b70dd.1
Oracle Linux 8mod_ssl1:2.4.37-51.0.1.module+el8.7.0+20923+af3b70dd.1
Oracle Linux 9httpd2.4.53-7.0.1.el9_1.1
Oracle Linux 9httpd-core2.4.53-7.0.1.el9_1.1
Oracle Linux 9httpd-devel2.4.53-7.0.1.el9_1.1
Oracle Linux 9httpd-filesystem2.4.53-7.0.1.el9_1.1
Oracle Linux 9httpd-manual2.4.53-7.0.1.el9_1.1
Oracle Linux 9httpd-tools2.4.53-7.0.1.el9_1.1
Oracle Linux 9mod_ldap2.4.53-7.0.1.el9_1.1
Oracle Linux 9mod_lua2.4.53-7.0.1.el9_1.1
Oracle Linux 9mod_proxy_html1:2.4.53-7.0.1.el9_1.1
Oracle Linux 9mod_session2.4.53-7.0.1.el9_1.1
Oracle Linux 9mod_ssl1:2.4.53-7.0.1.el9_1.1
rapidfort amazon linux 2023httpd1:2.4.55-1.amzn2023
rapidfort amazon linux 2023httpd-core2.4.55-1.amzn2023
rapidfort amazon linux 2023httpd-devel2.4.55-1.amzn2023
rapidfort amazon linux 2023httpd-filesystem2.4.55-1.amzn2023
rapidfort amazon linux 2023httpd-manual2.4.55-1.amzn2023
rapidfort amazon linux 2023httpd-tools2.4.55-1.amzn2023
rapidfort amazon linux 2023mod_ldap2.4.55-1.amzn2023
rapidfort amazon linux 2023mod_lua2.4.55-1.amzn2023
rapidfort amazon linux 2023mod_proxy_html1:2.4.55-1.amzn2023
rapidfort amazon linux 2023mod_session2.4.55-1.amzn2023
rapidfort amazon linux 2023mod_ssl1:2.4.55-1.amzn2023
rapidfort Oracle Linux 9httpd0:2.4.53-7.0.1.el9_1.1
rapidfort Oracle Linux 9httpd-core0:2.4.53-7.0.1.el9_1.1
rapidfort Oracle Linux 9httpd-devel0:2.4.53-7.0.1.el9_1.1
rapidfort Oracle Linux 9httpd-filesystem0:2.4.53-7.0.1.el9_1.1
rapidfort Oracle Linux 9httpd-manual0:2.4.53-7.0.1.el9_1.1
rapidfort Oracle Linux 9httpd-tools0:2.4.53-7.0.1.el9_1.1
rapidfort Oracle Linux 9mod_ldap0:2.4.53-7.0.1.el9_1.1
rapidfort Oracle Linux 9mod_lua0:2.4.53-7.0.1.el9_1.1
rapidfort Oracle Linux 9mod_proxy_html1:2.4.53-7.0.1.el9_1.1
rapidfort Oracle Linux 9mod_session0:2.4.53-7.0.1.el9_1.1
rapidfort Oracle Linux 9mod_ssl1:2.4.53-7.0.1.el9_1.1
rapidfort ubuntu 20.04apache20:2.4.52-1ubuntu4.3
rapidfort ubuntu 20.04rf-apache20:2.4.52-1ubuntu4.3
rapidfort ubuntu 22.04apache20:2.4.52-1ubuntu4.3
rapidfort ubuntu 22.04rf-apache20:2.4.52-1ubuntu4.3
rapidfort ubuntu 24.04apache20:2.4.52-1ubuntu4.3
rapidfort ubuntu 24.04rf-apache20:2.4.52-1ubuntu4.3
Red Hathttpddüzeltme belirtilmemiş
Red Hathttpd-develdüzeltme belirtilmemiş
Red Hathttpd-manualdüzeltme belirtilmemiş
Red Hathttpd-toolsdüzeltme belirtilmemiş
Red Hathttpd24-httpddüzeltme belirtilmemiş
Red Hathttpd24-httpd-develdüzeltme belirtilmemiş
Red Hathttpd24-httpd-manualdüzeltme belirtilmemiş
Red Hathttpd24-httpd-toolsdüzeltme belirtilmemiş
Red Hathttpd24-mod_ldapdüzeltme belirtilmemiş
Red Hathttpd24-mod_mddüzeltme belirtilmemiş
Red Hathttpd24-mod_proxy_htmldüzeltme belirtilmemiş
Red Hathttpd24-mod_sessiondüzeltme belirtilmemiş
Red Hathttpd24-mod_ssldüzeltme belirtilmemiş
Red Hatmod_ldapdüzeltme belirtilmemiş
Red Hatmod_proxy_htmldüzeltme belirtilmemiş
Red Hatmod_sessiondüzeltme belirtilmemiş
Red Hatmod_ssldüzeltme belirtilmemiş
rocky 8httpd:2.4::httpd2.4.37-51.module+el8.7.0+1059+126e9251
rocky 8httpd:2.4::httpd-devel2.4.37-51.module+el8.7.0+1059+126e9251
rocky 8httpd:2.4::httpd-filesystem2.4.37-51.module+el8.7.0+1059+126e9251
rocky 8httpd:2.4::httpd-manual2.4.37-51.module+el8.7.0+1059+126e9251
rocky 8httpd:2.4::httpd-tools2.4.37-51.module+el8.7.0+1059+126e9251
rocky 8httpd:2.4::mod_http21.15.7-5.module+el8.6.0+823+f143cee1
rocky 8httpd:2.4::mod_ldap2.4.37-51.module+el8.7.0+1059+126e9251
rocky 8httpd:2.4::mod_md1:2.0.8-8.module+el8.5.0+695+1fa8055e
rocky 8httpd:2.4::mod_proxy_html1:2.4.37-51.module+el8.7.0+1059+126e9251
rocky 8httpd:2.4::mod_session2.4.37-51.module+el8.7.0+1059+126e9251
rocky 8httpd:2.4::mod_ssl1:2.4.37-51.module+el8.7.0+1059+126e9251
rocky 9httpd2.4.53-7.el9_1.1
rocky 9httpd-core2.4.53-7.el9_1.1
rocky 9httpd-devel2.4.53-7.el9_1.1
rocky 9httpd-filesystem2.4.53-7.el9_1.1
rocky 9httpd-manual2.4.53-7.el9_1.1
rocky 9httpd-tools2.4.53-7.el9_1.1
rocky 9mod_ldap2.4.53-7.el9_1.1
rocky 9mod_lua2.4.53-7.el9_1.1
rocky 9mod_proxy_html1:2.4.53-7.el9_1.1
rocky 9mod_session2.4.53-7.el9_1.1
rocky 9mod_ssl1:2.4.53-7.el9_1.1
root.io debian 12rootio-apache22.4.55-1
root.io debian 13rootio-apache22.4.55-1
ubuntu 16.04-ESMapache22.4.18-2ubuntu3.17+esm8
ubuntu 18.04apache22.4.29-1ubuntu4.26
ubuntu 18.04-ESMapache22.4.29-1ubuntu4.26
ubuntu 20.04apache22.4.41-4ubuntu3.13
ubuntu 20.04-ESMapache22.4.41-4ubuntu3.13
ubuntu 22.04apache22.4.52-1ubuntu4.3
ubuntu 22.10apache22.4.54-2ubuntu1.1
ubuntu 23.04apache22.4.55-1ubuntu1
ubuntu 23.10apache22.4.55-1ubuntu1
ubuntu 24.04apache22.4.55-1ubuntu1
ubuntu 24.10apache22.4.55-1ubuntu1
ubuntu 25.04apache22.4.55-1ubuntu1
ubuntu 25.10apache22.4.55-1ubuntu1
ubuntu 26.04apache22.4.55-1ubuntu1
ubuntu 26.10apache22.4.55-1ubuntu1

Referanslar

24 referansın hepsi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.