CVE-2022-22719CWE-665

mod_lua Use of uninitialized value of in r:parsebody

published March 14, 2022

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.4th percentile for exploit probability.

CVSS
—
EPSS
69%
Percentile
99.4
In the wild
Unconfirmed
What it is

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.69097 · 99.4th percentile
Weakness
CWE-665 · Improper Initialization
Published
2022-03-14T10:15Z
EPSS history
Timeline
  • 14 MAR 10:15Z
    mod_lua Use of uninitialized value of in r:parsebody
    cvelistv5