Linux · 
Ubuntu · Package update · March 14, 2022
Ubuntu · Package update · March 14, 2022libapache2-mod-md 2.4.52-1ubuntu2: libapache2-mod-md 2.4.52-1ubuntu2 for Ubuntu 22.04.1 LTS (jammy)
libapache2-mod-md 2.4.52-1ubuntu2, released March 14, 2022, fixes 4 CVEs in libapache2-mod-md. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.6980
99th percentile
Priority of the 4 CVEs
Patch now 0
Urgent 0
High 4
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| libapache2-mod-md | Ubuntu 22.04.1 LTS (jammy) | 2.4.52-1ubuntu2 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2022-22719 | apache2: A carefully crafted request body can cause a read to a random memory area which could cause the process to crash | 8.1 | 0.6980 | None reported |
| High | CVE-2022-23943 | apache2-data: Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with p... | 9.8 | 0.5040 | None reported |
| High | CVE-2022-22721 | apache2-suexec-custom: If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer... | 9.1 | 0.4186 | None reported |
| High | CVE-2022-22720 | apache2-data: Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the re... | 9.8 | 0.2819 | None reported |
Showing 1 to 4 of 4
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.