CVE-2022-22720

HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier

Severity Score

9.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

Apache HTTP Server versiones 2.4.52 y anteriores, no cierran la conexión entrante cuando son encontrados errores descartando el cuerpo de la petición, exponiendo al servidor al contrabando de peticiones HTTP

A flaw was found in httpd. The inbound connection is not closed when it fails to discard the request body, which may expose the server to HTTP request smuggling.

*Credits: James Kettle <james.kettle portswigger.net>

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

Low

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2022-01-06 CVE Reserved
2022-03-14 CVE Published
2023-11-25 First Exploit
2024-06-05 EPSS Updated
2024-08-03 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

CAPEC

References (19)

URL	Tag	Source
http://seclists.org/fulldisclosure/2022/May/33	Mailing List
http://seclists.org/fulldisclosure/2022/May/35	Mailing List
http://seclists.org/fulldisclosure/2022/May/38	Mailing List
http://www.openwall.com/lists/oss-security/2022/03/14/3	Mailing List
https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html	Mailing List
https://security.netapp.com/advisory/ntap-20220321-0001	Third Party Advisory
https://support.apple.com/kb/HT213255	Third Party Advisory
https://support.apple.com/kb/HT213256	Third Party Advisory
https://support.apple.com/kb/HT213257	Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2022.html	Third Party Advisory

URL	Date	SRC
https://github.com/Benasin/CVE-2022-22720	2023-11-25

URL	Date	SRC
https://www.oracle.com/security-alerts/cpuapr2022.html	2023-11-07

URL	Date	SRC
https://httpd.apache.org/security/vulnerabilities_24.html	2023-11-07
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO	2023-11-07
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO	2023-11-07
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD	2023-11-07
https://security.gentoo.org/glsa/202208-20	2023-11-07
https://access.redhat.com/security/cve/CVE-2022-22720	2022-04-20
https://bugzilla.redhat.com/show_bug.cgi?id=2064321	2022-04-20

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				<= 2.4.52 Search vendor "Apache" for product "Http Server" and version " <= 2.4.52"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				34 Search vendor "Fedoraproject" for product "Fedora" and version "34"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				35 Search vendor "Fedoraproject" for product "Fedora" and version "35"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				36 Search vendor "Fedoraproject" for product "Fedora" and version "36"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				9.0 Search vendor "Debian" for product "Debian Linux" and version "9.0"		-		Affected
Oracle Search vendor "Oracle"		Enterprise Manager Ops Center Search vendor "Oracle" for product "Enterprise Manager Ops Center"				12.4.0.0 Search vendor "Oracle" for product "Enterprise Manager Ops Center" and version "12.4.0.0"		-		Affected
Oracle Search vendor "Oracle"		Http Server Search vendor "Oracle" for product "Http Server"				12.2.1.3.0 Search vendor "Oracle" for product "Http Server" and version "12.2.1.3.0"		-		Affected
Oracle Search vendor "Oracle"		Http Server Search vendor "Oracle" for product "Http Server"				12.2.1.4.0 Search vendor "Oracle" for product "Http Server" and version "12.2.1.4.0"		-		Affected
Oracle Search vendor "Oracle"		Zfs Storage Appliance Kit Search vendor "Oracle" for product "Zfs Storage Appliance Kit"				8.8 Search vendor "Oracle" for product "Zfs Storage Appliance Kit" and version "8.8"		-		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2020-001		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2021-001		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2021-002		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2021-003		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2021-004		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2021-005		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2021-006		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2021-007		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2021-008		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2022-001		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2022-002		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.15.7 Search vendor "Apple" for product "Mac Os X" and version "10.15.7"		security_update_2022-003		Affected
Apple Search vendor "Apple"		Macos Search vendor "Apple" for product "Macos"				< 10.15.7 Search vendor "Apple" for product "Macos" and version " < 10.15.7"		-		Affected
Apple Search vendor "Apple"		Macos Search vendor "Apple" for product "Macos"				>= 11.0 < 11.6.6 Search vendor "Apple" for product "Macos" and version " >= 11.0 < 11.6.6"		-		Affected
Apple Search vendor "Apple"		Macos Search vendor "Apple" for product "Macos"				>= 12.0 <= 12.4 Search vendor "Apple" for product "Macos" and version " >= 12.0 <= 12.4"		-		Affected