Inconsistent interpretation of HTTP requests in Apache HTTP Server - CVE-2022-22720

Vulnerability identifier: #VU61286

CSH Severity: Medium

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-22720

CWE-ID: CWE-444

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to preform HTTP request smuggling attacks.

The vulnerability exists due to improper validation of HTTP requests. A remote attacker can send a specially crafted HTTP request to the server and smuggle arbitrary HTTP headers.

Successful exploitation of vulnerability may allow an attacker to poison HTTP cache and perform phishing attacks.

Apache HTTP Server
Amazon Linux AMI
Gentoo Linux
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
F5OS
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Enterprise Storage
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems)
Red Hat Enterprise Linux Server - Extended Life Cycle Support
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Desktop
Anolis OS
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
CentOS
IBM i
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
HPE Helion Openstack
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
macOS
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Point of Sale
SUSE Linux Enterprise Server
Oracle Solaris
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
Slackware Linux
Ubuntu
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Server Applications
openSUSE Leap
openEuler
Fedora
MELSOFT iQ AppPortal
Traffix SDC
BIG-IP
jbcs-httpd24-openssl-pkcs11 (Red Hat package)
jbcs-httpd24-openssl-chil (Red Hat package)
jbcs-httpd24-apr-util (Red Hat package)
jbcs-httpd24-mod_http2 (Red Hat package)
jbcs-httpd24-nghttp2 (Red Hat package)
jbcs-httpd24-mod_md (Red Hat package)
httpd (Red Hat package)
jbcs-httpd24-httpd (Red Hat package)
jbcs-httpd24-mod_security (Red Hat package)
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
jbcs-httpd24-curl (Red Hat package)
SUSE Linux Enterprise Module for Packagehub Subpackages
mod_http2
mod_md
apache2-debugsource
apache2-debuginfo
apache2-devel
apache2-worker
apache2-utils
apache2-prefork
apache2-example-pages
apache2-doc
apache2
httpd-devel
httpd-manual
httpd
httpd-tools
mod_ldap
mod_proxy_html
mod_session
mod_ssl
apache2-worker-debuginfo
apache2-utils-debuginfo
apache2-prefork-debuginfo
apache2 (Ubuntu package)
apache2-bin (Ubuntu package)
httpd-filesystem
httpd-debugsource
httpd-help
httpd-debuginfo
apache2-event-debuginfo
apache2-event
app-admin/apache-tools
www-servers/apache
Red Hat Software Collections
IBM Cloud Pak System
JBoss Core Services
IBM Security SiteProtector System
IBM Aspera Orchestrator
EasyApache
Dell Secure Connect Gateway
IBM Rational Build Forge
IBM Netezza Performance Portal
Dell EMC Unisphere Central
IBM Tivoli Monitoring
BIG-IQ Centralized Management
IBM Qradar SIEM
EMC ECS
Watson Studio on Cloud Pak for Data
XtremIO X2
Maximo Application Suite - IoT Component
IBM Aspera Faspex for Linux
IBM Aspera Faspex for Windows
Dell EMC Unity VSA Operating Environment (OE)
Dell EMC Unity XT Operating Environment (OE)
Dell EMC Unity Operating Environment (OE)
Gaia

Install updates from vendor's website.

Apache HTTP Server - update to 2.4.53
MELSOFT iQ AppPortal - update to 1.29F
jbcs-httpd24-openssl-pkcs11 (Red Hat package) - addressed in versions 0.4.10-26.el8jbcs, 0.4.10-26.jbcs.el7
jbcs-httpd24-openssl-chil (Red Hat package) - addressed in versions 1.0.0-11.el8jbcs, 1.0.0-11.jbcs.el7
jbcs-httpd24-apr-util (Red Hat package) - addressed in versions 1.6.1-91.el8jbcs, 1.6.1-91.jbcs.el7
jbcs-httpd24-mod_http2 (Red Hat package) - addressed in versions 1.15.7-22.el8jbcs, 1.15.7-22.jbcs.el7
jbcs-httpd24-nghttp2 (Red Hat package) - addressed in versions 1.39.2-41.el8jbcs, 1.39.2-41.jbcs.el7
jbcs-httpd24-mod_md (Red Hat package) - addressed in versions 2.0.8-41.el8jbcs, 2.0.8-41.jbcs.el7
httpd (Red Hat package) - addressed in versions 2.2.15-70.el6_10, 2.4.6-45.el7_3.8, 2.4.6-67.el7_4.9, 2.4.6-89.el7_6.4, 2.4.6-90.el7_7.3, 2.4.6-97.el7_9.5
IBM Cloud Pak System - update to 2.3.3.5
JBoss Core Services - update to 2.4.37 SP11
jbcs-httpd24-httpd (Red Hat package) - addressed in versions 2.4.37-80.el8jbcs, 2.4.37-80.jbcs.el7
jbcs-httpd24-mod_security (Red Hat package) - addressed in versions 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7
IBM Security SiteProtector System - update to 3.1.1.18
IBM Aspera Orchestrator - update to 4.0.1.2b9681
EasyApache - update to 4 2022-3-16
Dell Secure Connect Gateway - update to 5.12.00.10
IBM Qradar SIEM - addressed in versions 7.3.3 Fix Pack 12, 7.4.3 Fix Pack 6, 7.5.0 Update Pack 2
jbcs-httpd24-curl (Red Hat package) - addressed in versions 7.78.0-3.el8jbcs, 7.78.0-3.jbcs.el7
IBM Rational Build Forge - update to 8.0.0.23
macOS - addressed in versions 10.15.7 19H1922, 11.6.6 20G624, 12.4 21F79
mod_http2 - update to 1.15.7-3
mod_md - update to 2.0.8-8
IBM Netezza Performance Portal - update to 2.1.1.14
apache2-debugsource - addressed in versions 2.2.34-70.41.1, 2.4.23-29.88.1, 2.4.33-150000.3.66.1, 2.4.51-35.13.1, 2.4.51-150200.3.42.1, 2.4.66-150400.6.57.1
apache2-debuginfo - addressed in versions 2.2.34-70.41.1, 2.4.23-29.88.1, 2.4.33-150000.3.66.1, 2.4.51-35.13.1, 2.4.51-150200.3.42.1, 2.4.66-150400.6.57.1
apache2-devel - addressed in versions 2.2.34-70.41.1, 2.4.33-150000.3.66.1, 2.4.51-35.13.1, 2.4.51-150200.3.42.1, 2.4.66-150400.6.57.1
apache2-worker - addressed in versions 2.2.34-70.41.1, 2.4.23-29.88.1, 2.4.33-150000.3.66.1, 2.4.51-35.13.1, 2.4.51-150200.3.42.1, 2.4.66-150400.6.57.1
apache2-utils - addressed in versions 2.2.34-70.41.1, 2.4.23-29.88.1, 2.4.33-150000.3.66.1, 2.4.51-35.13.1, 2.4.51-150200.3.42.1, 2.4.66-150400.6.57.1
apache2-prefork - addressed in versions 2.2.34-70.41.1, 2.4.23-29.88.1, 2.4.33-150000.3.66.1, 2.4.51-35.13.1, 2.4.51-150200.3.42.1, 2.4.66-150400.6.57.1
apache2-example-pages - addressed in versions 2.2.34-70.41.1, 2.4.23-29.88.1, 2.4.51-35.13.1, 2.4.66-150400.6.57.1
apache2-doc - addressed in versions 2.2.34-70.41.1, 2.4.23-29.88.1, 2.4.33-150000.3.66.1, 2.4.51-35.13.1, 2.4.51-150200.3.42.1, 2.4.66-150400.6.57.1
apache2 - addressed in versions 2.2.34-70.41.1, 2.4.23-29.88.1, 2.4.33-150000.3.66.1, 2.4.51-35.13.1, 2.4.51-150200.3.42.1, 2.4.66-150400.6.57.1
httpd-devel - addressed in versions 2.4.6-97, 2.4.37-43.0.1
httpd-manual - addressed in versions 2.4.6-97, 2.4.37-43.0.1
httpd - addressed in versions 2.4.6-97, 2.4.37-43.0.1
httpd-tools - addressed in versions 2.4.6-97, 2.4.37-43.0.1
mod_ldap - addressed in versions 2.4.6-97, 2.4.37-43.0.1
mod_proxy_html - addressed in versions 2.4.6-97, 2.4.37-43.0.1
mod_session - addressed in versions 2.4.6-97, 2.4.37-43.0.1
mod_ssl - addressed in versions 2.4.6-97, 2.4.37-43.0.1
apache2-worker-debuginfo - addressed in versions 2.4.23-29.88.1, 2.4.33-150000.3.66.1, 2.4.51-35.13.1, 2.4.51-150200.3.42.1, 2.4.66-150400.6.57.1
apache2-utils-debuginfo - addressed in versions 2.4.23-29.88.1, 2.4.33-150000.3.66.1, 2.4.51-35.13.1, 2.4.51-150200.3.42.1, 2.4.66-150400.6.57.1
apache2-prefork-debuginfo - addressed in versions 2.4.23-29.88.1, 2.4.33-150000.3.66.1, 2.4.51-35.13.1, 2.4.51-150200.3.42.1, 2.4.66-150400.6.57.1
apache2 (Ubuntu package) - addressed in versions 2.4.29-1ubuntu4.22, 2.4.41-4ubuntu3.10, 2.4.48-3.1ubuntu3.3, 2.4.182ubuntu3.17+esm5
apache2-bin (Ubuntu package) - addressed in versions 2.4.29-1ubuntu4.22, 2.4.41-4ubuntu3.10, 2.4.48-3.1ubuntu3.3, 2.4.182ubuntu3.17+esm5
httpd-filesystem - update to 2.4.37-43.0.1
mod_session - update to 2.4.43-14
httpd-debugsource - update to 2.4.43-14
httpd-help - update to 2.4.43-14
httpd-filesystem - update to 2.4.43-14
mod_md - update to 2.4.43-14
mod_proxy_html - update to 2.4.43-14
httpd-debuginfo - update to 2.4.43-14
httpd-devel - update to 2.4.43-14
mod_ldap - update to 2.4.43-14
httpd-tools - update to 2.4.43-14
mod_ssl - update to 2.4.43-14
httpd - update to 2.4.43-14
apache2-event-debuginfo - addressed in versions 2.4.51-150200.3.42.1, 2.4.66-150400.6.57.1
apache2-event - addressed in versions 2.4.51-150200.3.42.1, 2.4.66-150400.6.57.1
httpd - addressed in versions 2.4.53-1.fc34, 2.4.53-1.fc35, 2.4.53-1.fc36
app-admin/apache-tools - update to 2.4.54
www-servers/apache - update to 2.4.54
httpd - update to 2.4.54-3
EMC ECS - update to 3.7.0.2
Dell EMC Unisphere Central - update to 4.0.10.1673904
IBM Aspera Faspex for Linux - update to 4.4.2
IBM Aspera Faspex for Windows - update to 4.4.2
Watson Studio on Cloud Pak for Data - addressed in versions 4.8.7, 5.1.0
Dell EMC Unity VSA Operating Environment (OE) - update to 5.2.0.0.5.173
Dell EMC Unity XT Operating Environment (OE) - update to 5.2.0.0.5.173
Dell EMC Unity Operating Environment (OE) - update to 5.2.0.0.5.173
IBM Tivoli Monitoring - update to 6.3.0.7 Plus Service Pack 5
XtremIO X2 - update to 6.4.1-11
Maximo Application Suite - IoT Component - addressed in versions 8.7.20, 8.8.16, 9.0.6
Gaia - update to R81.10 Take 55

• https://downloads.apache.org/httpd/CHANGES_2.4.53

• Multiple vulnerabilities in Apache HTTP Server
• Slackware Linux update for httpd
• Ubuntu update for apache2
• Ubuntu update for apache2
• Multiple vulnerabilities in cPanel EasyApache 4
• Red Hat Enterprise Linux 8 update for the httpd:2.4 module
• Red Hat Enterprise Linux 7 update for httpd
• Red Hat Enterprise Linux 8.1 update for the httpd:2.4 module
• Red Hat Software Collections update for httpd24-httpd
• Red Hat Enterprise Linux 8.4 update for the httpd:2.4 module
• CentOS 7 update for httpd
• Red Hat Enterprise Linux 8.2 update for the httpd:2.4 module
• Red Hat Enterprise Linux 7.7 update for httpd
• Red Hat Enterprise Linux 7.4 update for httpd
• Red Hat Enterprise Linux 7.3 update for httpd
• Red Hat Enterprise Linux 7.6 update for httpd
• Red Hat Enterprise Linux 6 Extended Lifecycle Support update for httpd
• Multiple vulnerabilities in Oracle Solaris
• Multiple vulnerabilities in Red Hat JBoss Core Services
• Amazon Linux AMI update for httpd24
• Multiple vulnerabilities in Mitsubishi Electric MELSOFT iQ AppPortal
• Multiple vulnerabilities in Apple macOS Monterey
• Multiple vulnerabilities in Apple macOS Big Sur
• Multiple vulnerabilities in Apple macOS Catalina
• Multiple vulnerabilities in IBM Tivoli Monitoring
• Multiple vulnerabilities in IBM Security SiteProtector System
• Multiple vulnerabilities in IBM i
• HTTP request smuggling in IBM Rational Build Forge
• Multiple vulnerabilities in DELL Secure Connect Gateway Security
• Gentoo update for Apache HTTPD
• Multiple vulnerabilities in IBM Cloud Pak System third-party components
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Dell Elastic Cloud Storage (ECS)
• Multiple vulnerabilities in Dell Unisphere Central
• Multiple vulnerabilities in IBM Aspera Faspex
• IBM Aspera Orchestrator update for Apache HTTP Server
• SUSE update for apache2
• SUSE update for apache2
• SUSE update for apache2
• SUSE update for apache2
• SUSE update for apache2
• F5 BIG-IP update for Apache HTTP Server
• F5 BIG-IQ Centralized Management update for Apache HTTP Server
• Traffix SDC update for Apache HTTP Server
• F5OS update for Apache HTTP Server
• Multiple vulnerabilities in Check Point Gaia
• Multiple vulnerabilities in Dell XtremIO X2
• Multiple vulnerabilities in Dell Unity, Dell UnityVSA, and Dell Unity XT
• openEuler update for httpd
• Amazon Linux AMI update for httpd
• Fedora 35 update for httpd
• Fedora 36 update for httpd
• Fedora 34 update for httpd
• Multiple vulnerabilities in IBM Netezza Performance Portal
• Multiple vulnerabilities in IBM Watson Studio on Cloud Pak for Data
• Multiple vulnerabilities in IBM Maximo Application Suite - IoT Component
• Anolis OS update for httpd
• Anolis OS update for httpd:2.4 module
• SUSE update for apache2