{"id":"CVE-2022-22719","published":"2022-03-14T10:15:16Z","modified":"2024-08-03T03:21:49Z","title":"mod_lua Use of uninitialized value of in r:parsebody","vendor":"Apache Software Foundation","product":"Apache HTTP Server","tier":"core","eol":null,"affectedVersions":[{"vendor":"Apache Software Foundation","product":"Apache HTTP Server","versions":[">= Apache HTTP Server 2.4, <= 2.4.52"]}],"description":{"text":"A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is in Apache HTTP Server, where processing a request body can trigger a read from a random memory area, a defect rooted in improper initialization. The provided material does not specify the attack vector, authentication, user interaction, or configuration requirements, so the conditions under which an attacker can trigger it are not stated; the observable effect is that the server process may crash.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:16:31Z"},"cvss":null,"epss":{"score":0.69097,"percentile":0.99351,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":2,"pulses":[{"name":"Oracle Critical Patch Update Advisory - April 2022","url":"https://otx.alienvault.com/pulse/626040216e00cd388b1b9180","created":"2022-04-20"},{"name":"ACTUALIZACION | Se solucionaron varios problemas de seguridad en Apache HTTP Server. | UBUNTU","url":"https://otx.alienvault.com/pulse/62349e64d8d12131cfc21eaa","created":"2022-03-18"}],"provenance":"machine"},"cwes":[{"id":"CWE-665","name":"Improper Initialization"}],"references":[{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["x_refsource_MISC"]},{"url":"http://www.openwall.com/lists/oss-security/2022/03/14/4","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC"]},{"url":"https://security.netapp.com/advisory/ntap-20220321-0001/","tags":["x_refsource_CONFIRM"]},{"url":"https://support.apple.com/kb/HT213257","tags":["x_refsource_CONFIRM"]},{"url":"https://support.apple.com/kb/HT213256","tags":["x_refsource_CONFIRM"]},{"url":"https://support.apple.com/kb/HT213255","tags":["x_refsource_CONFIRM"]},{"url":"http://seclists.org/fulldisclosure/2022/May/33","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"http://seclists.org/fulldisclosure/2022/May/35","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"http://seclists.org/fulldisclosure/2022/May/38","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"https://security.gentoo.org/glsa/202208-20","tags":["vendor-advisory","x_refsource_GENTOO"]}],"techniques":[{"id":"T1190","name":"Exploit Public-Facing Application","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Crafted HTTP request to public-facing web server","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"A carefully crafted request body can cause a read","start":0,"end":49}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1499.004","name":"Application or System Exploitation","tactics":["impact"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Crash of process causes denial of service","mappingType":"primary_impact","evidence":[{"from":"description","quote":"could cause the process to crash","start":80,"end":112}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[{"id":"SRC-b804e28bf5894dd4955f","title":"Whitepaper Name Goes","publisher":"trustwave.com","url":"https://www.trustwave.com/hubfs/Web/Library/Documents_pdf/Trustwave_SpiderLabs_2023_Hospitality_Sector_Threat_Landscape.pdf","date":null,"mentions":[{"quote":"Smuggling (CVE-2021-23017)\r\n▪ Mod_dav module of httpd DoS (CVE-2006-20001)\r\n▪ Mod_proxy module of httpd (CVE-2022-37436)\r\n▪ SQLite DoS vulnerability (CVE-2019-20372)\r\n▪ Jenkins RCE (CVE-2017-20005)\r\n▪ Nginx web server DoS (CVE-2017-7529)\r\n▪ Spring Framework RCE (CVE-2016-1247)\r\n▪ Apache HTTP Server DoS (CVE-2022-22719)","start":45571,"end":45891}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2022-27862","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-27862","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[{"stage":"exploitation","techniques":["T1190"],"provenance":"ai"},{"stage":"primary","techniques":["T1499.004"],"provenance":"ai"}],"timeline":[{"date":"2022-03-14","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2022-22719","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":24.8,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.87,"detail":"percentile 0.9935"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":1.08,"detail":"2 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}