CVE:CVE-2022-22721
CNNVD:CNNVD-202203-1299
Apache HTTP Server是美国阿帕奇（Apache）基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。
Apache HTTP Server 2.4.52 及更早版本存在输入验证错误漏洞，该漏洞源于如果在 32 位系统上将 LimitXMLRequestBody 设置为允许大于 350MB（默认为 1M）的请求正文，则会发生整数溢出，随后会导致越界写入。
solution:Upgrade apache http_server to a higher version than 2.4.52,and avoid the version (,2.4.52]; Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.4.0.0,and avoid the version 12.4.0.0; Upgrade oracle http_server to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle zfs_storage_appliance_kit to a higher version than 8.8,and avoid the version 8.8; Upgrade apple mac_os_x to a higher version than 10.15.7,10.15.7:security_update_2020-001,10.15.7:security_update_2021-001,10.15.7:security_update_2021-002,10.15.7:security_update_2021-003,10.15.7:security_update_2021-004,10.15.7:security_update_2021-005,10.15.7:security_update_2021-006,10.15.7:security_update_2021-007,10.15.7:security_update_2021-008,10.15.7:security_update_2022-001,10.15.7:security_update_2022-002,10.15.7:security_update_2022-003,and avoid the version [10.15,10.15.7),10.15.7:security_update_2020-001,10.15.7:security_update_2021-001,10.15.7:security_update_2021-002,10.15.7:security_update_2021-003,10.15.7:security_update_2021-004,10.15.7:security_update_2021-005,10.15.7:security_update_2021-006,10.15.7:security_update_2021-007,10.15.7:security_update_2021-008,10.15.7:security_update_2022-001,10.15.7:security_update_2022-002,10.15.7:security_update_2022-003; Upgrade apple macos to a higher version than 11.6.6,12.4,and avoid the version [11.0,11.6.6),[12.0,12.4)