Intrusion PreventionApache.httpd.mod_sed.CVE-2022-30522.DoS
Description
This indicates an attack attempt to exploit a Denial of Service Vulnerability in Apache Software Foundation HTTP Server.
This vulnerability is due to improper input validation for the mod_sed module. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successfully exploiting this vulnerability could result in denial of service in the context of large memory allocations.
Affected Products
Apache Software Foundation HTTP Server prior to 2.4.54
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://httpd.apache.org/security/vulnerabilities_24.html#:~:text=of%20service%20(-,CVE%2D2022%2D30522,-)
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2023-07-05 | 24.594 | Sig Added |
| 2022-07-26 | 21.363 | Default_action:pass:drop |
| 2022-07-15 | 21.357 |
| ID | 51722 |
| Created | Jun 23, 2022 |
| Updated | Jul 04, 2023 |
| Risk |
|
| CVE ID | CVE-2022-30522 |
| Exploit Prediction Score | 42.31% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Apache |