CVE catalog

CVE-2023-31122

apache2: CVE-2023-31122

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
3.04% · Oct 25, 2026

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianapache2sid2.4.69-1fixed
Debianapache2forky2.4.69-1fixed
Debianapache2trixie2.4.68-1~deb13u1fixed
Debianapache2trixie-security2.4.69-1~deb13u1fixed
Debianapache2bookworm2.4.68-1~deb12u1fixed
Debianapache2bookworm-security2.4.67-1~deb12u3fixed
Alpineapache23.152.4.58-r0fixed
Alpineapache23.162.4.58-r0fixed
Alpineapache23.172.4.58-r0fixed
Alpineapache23.182.4.58-r0fixed
Alpineapache23.192.4.58-r0fixed
Alpineapache23.202.4.58-r0fixed
Alpineapache23.212.4.58-r0fixed
Alpineapache23.222.4.58-r0fixed
Alpineapache23.232.4.58-r0fixed
Alpineapache23.242.4.58-r0fixed
Ubuntuapache2pro2.4.27-2ubuntu3vulnerable
Ubuntuapache2pro2.4.29-1ubuntu1vulnerable
Ubuntuapache2pro2.4.29-1ubuntu2vulnerable
Ubuntuapache2pro2.4.29-1ubuntu3vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.1vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.2vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.3vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.4vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.5vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.6vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.7vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.8vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.10vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.11vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.12vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.13vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.14vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.16vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.17vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.18vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.19vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.20vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.21vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.22vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.23vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.24vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.25vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.26vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.27vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.27+esm1fixed
Ubuntuapache220.042.4.41-1ubuntu1vulnerable
Ubuntuapache220.042.4.41-4ubuntu1vulnerable
Ubuntuapache220.042.4.41-4ubuntu2vulnerable
Ubuntuapache220.042.4.41-4ubuntu3vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.1vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.3vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.4vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.5vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.6vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.7vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.8vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.9vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.10vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.11vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.12vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.13vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.14vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.15fixed
Ubuntuapache222.042.4.48-3.1ubuntu3vulnerable
Ubuntuapache222.042.4.48-3.1ubuntu4vulnerable
Ubuntuapache222.042.4.51-2ubuntu1vulnerable
Ubuntuapache222.042.4.52-1ubuntu1vulnerable
Ubuntuapache222.042.4.52-1ubuntu2vulnerable
Ubuntuapache222.042.4.52-1ubuntu4vulnerable
Ubuntuapache222.042.4.52-1ubuntu4.1vulnerable
Ubuntuapache222.042.4.52-1ubuntu4.2vulnerable
Ubuntuapache222.042.4.52-1ubuntu4.3vulnerable
Ubuntuapache222.042.4.52-1ubuntu4.4vulnerable
Ubuntuapache222.042.4.52-1ubuntu4.5vulnerable
Ubuntuapache222.042.4.52-1ubuntu4.6vulnerable
Ubuntuapache222.042.4.52-1ubuntu4.7fixed
Ubuntuapache2pro2.4.27-2ubuntu3vulnerable
Ubuntuapache2pro2.4.29-1ubuntu1vulnerable
Ubuntuapache2pro2.4.29-1ubuntu2vulnerable
Ubuntuapache2pro2.4.29-1ubuntu3vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.1vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.2vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.3vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.4vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.5vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.6vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.7vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.8vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.10vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.11vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.12vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.13vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.14vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.16vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.17vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.18vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.19vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.20vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.21vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.22vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.23vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.24vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.25vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.26vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.27vulnerable
Ubuntuapache2pro2.4.29-1ubuntu4.27+esm1fixed
Ubuntuapache220.042.4.41-1ubuntu1vulnerable
Ubuntuapache220.042.4.41-4ubuntu1vulnerable
Ubuntuapache220.042.4.41-4ubuntu2vulnerable
Ubuntuapache220.042.4.41-4ubuntu3vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.1vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.3vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.4vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.5vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.6vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.7vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.8vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.9vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.10vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.11vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.12vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.13vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.14vulnerable
Ubuntuapache220.042.4.41-4ubuntu3.15fixed
Ubuntuapache222.042.4.48-3.1ubuntu3vulnerable
Ubuntuapache222.042.4.48-3.1ubuntu4vulnerable
Ubuntuapache222.042.4.51-2ubuntu1vulnerable
Ubuntuapache222.042.4.52-1ubuntu1vulnerable
Ubuntuapache222.042.4.52-1ubuntu2vulnerable
Ubuntuapache222.042.4.52-1ubuntu4vulnerable
Ubuntuapache222.042.4.52-1ubuntu4.1vulnerable
Ubuntuapache222.042.4.52-1ubuntu4.2vulnerable
Ubuntuapache222.042.4.52-1ubuntu4.3vulnerable
Ubuntuapache222.042.4.52-1ubuntu4.4vulnerable
Ubuntuapache222.042.4.52-1ubuntu4.5vulnerable
Ubuntuapache222.042.4.52-1ubuntu4.6vulnerable
Ubuntuapache222.042.4.52-1ubuntu4.7fixed
Opensuseapache2tumbleweed2.4.58-1.1fixed
Suseapache2linux enterprise software development kit 12 sp52.4.51-35.35.1fixed
Suseapache2-tls13linux enterprise software development kit 12 sp52.4.51-35.35.1fixed
Suseapache2linux enterprise server 12 sp52.4.51-35.35.1fixed
Suseapache2-tls13linux enterprise server 12 sp52.4.51-35.35.1fixed
Suseapache2linux enterprise server for sap applications 12 sp52.4.51-35.35.1fixed
Suseapache2-tls13linux enterprise server for sap applications 12 sp52.4.51-35.35.1fixed
Suseapache2linux enterprise high performance computing 15 sp2-ltss2.4.51-150200.3.59.1fixed
Suseapache2linux enterprise high performance computing 15 sp3-espos2.4.51-150200.3.59.1fixed
Suseapache2linux enterprise high performance computing 15 sp3-ltss2.4.51-150200.3.59.1fixed
Suseapache2linux enterprise server 15 sp2-ltss2.4.51-150200.3.59.1fixed
Suseapache2linux enterprise server 15 sp3-ltss2.4.51-150200.3.59.1fixed
Suseapache2linux enterprise server for sap applications 15 sp22.4.51-150200.3.59.1fixed
Suseapache2linux enterprise server for sap applications 15 sp32.4.51-150200.3.59.1fixed
Suseapache2manager proxy 4.22.4.51-150200.3.59.1fixed
Suseapache2manager server 4.22.4.51-150200.3.59.1fixed
Suseapache2enterprise storage 7.12.4.51-150200.3.59.1fixed
Suseapache2linux enterprise high performance computing 15 sp1-ltss2.4.33-150000.3.78.1fixed
Suseapache2linux enterprise server 15 sp1-ltss2.4.33-150000.3.78.1fixed
Suseapache2linux enterprise server for sap applications 15 sp12.4.33-150000.3.78.1fixed
Suseapache2linux enterprise module for basesystem 15 sp42.4.51-150400.6.14.1fixed
Suseapache2linux enterprise module for basesystem 15 sp52.4.51-150400.6.14.1fixed
Suseapache2linux enterprise module for package hub 15 sp42.4.51-150400.6.14.1fixed
Suseapache2linux enterprise module for package hub 15 sp52.4.51-150400.6.14.1fixed
Suseapache2linux enterprise module for server applications 15 sp42.4.51-150400.6.14.1fixed
Suseapache2linux enterprise module for server applications 15 sp52.4.51-150400.6.14.1fixed
Opensuseapache2leap 15.42.4.51-150400.6.14.1fixed
Opensuseapache2leap 15.52.4.51-150400.6.14.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianapache2sourcesid2.4.58-1not yet assignedNot reportedNot reported
Debianapache2sourceforky2.4.58-1not yet assignedNot reportedNot reported
Debianapache2sourcetrixie2.4.58-1not yet assignedNot reportedNot reported
Debianapache2sourcebookworm2.4.59-1~deb12u1not yet assignedNot reportedNot reported
Alpineapache2apk3.152.4.58-r0Not reportedALPINE-CVE-2023-31122Not reported
Alpineapache2apk3.162.4.58-r0Not reportedALPINE-CVE-2023-31122Not reported
Alpineapache2apk3.172.4.58-r0Not reportedALPINE-CVE-2023-31122Not reported
Alpineapache2apk3.182.4.58-r0Not reportedALPINE-CVE-2023-31122Not reported
Alpineapache2apk3.192.4.58-r0Not reportedALPINE-CVE-2023-31122Not reported
Alpineapache2apk3.202.4.58-r0Not reportedALPINE-CVE-2023-31122Not reported
Alpineapache2apk3.212.4.58-r0Not reportedALPINE-CVE-2023-31122Not reported
Alpineapache2apk3.222.4.58-r0Not reportedALPINE-CVE-2023-31122Not reported
Alpineapache2apk3.232.4.58-r0Not reportedALPINE-CVE-2023-31122Not reported
Alpineapache2apk3.242.4.58-r0Not reportedALPINE-CVE-2023-31122Not reported
Ubuntuapache2debpro2.4.29-1ubuntu4.27+esm1Not reportedUSN-6510-1Not reported
Ubuntuapache2deb20.042.4.41-4ubuntu3.15Not reportedUSN-6506-1Not reported
Ubuntuapache2deb22.042.4.52-1ubuntu4.7Not reportedUSN-6506-1Not reported
Ubuntuapache2debpro2.4.29-1ubuntu4.27+esm1Not reportedUBUNTU-CVE-2023-31122Not reported
Ubuntuapache2deb20.042.4.41-4ubuntu3.15Not reportedUBUNTU-CVE-2023-31122Not reported
Ubuntuapache2deb22.042.4.52-1ubuntu4.7Not reportedUBUNTU-CVE-2023-31122Not reported
Opensuseapache2rpmtumbleweed2.4.58-1.1Not reportedOPENSUSE-SU-2024:13350-1Not reported
Suseapache2rpmlinux enterprise software development kit 12 sp52.4.51-35.35.1Not reportedSUSE-SU-2023:4451-1Not reported
Suseapache2-tls13rpmlinux enterprise software development kit 12 sp52.4.51-35.35.1Not reportedSUSE-SU-2023:4451-1Not reported
Suseapache2rpmlinux enterprise server 12 sp52.4.51-35.35.1Not reportedSUSE-SU-2023:4451-1Not reported
Suseapache2-tls13rpmlinux enterprise server 12 sp52.4.51-35.35.1Not reportedSUSE-SU-2023:4451-1Not reported
Suseapache2rpmlinux enterprise server for sap applications 12 sp52.4.51-35.35.1Not reportedSUSE-SU-2023:4451-1Not reported
Suseapache2-tls13rpmlinux enterprise server for sap applications 12 sp52.4.51-35.35.1Not reportedSUSE-SU-2023:4451-1Not reported
Suseapache2rpmlinux enterprise high performance computing 15 sp2-ltss2.4.51-150200.3.59.1Not reportedSUSE-SU-2023:4431-1Not reported
Suseapache2rpmlinux enterprise high performance computing 15 sp3-espos2.4.51-150200.3.59.1Not reportedSUSE-SU-2023:4431-1Not reported
Suseapache2rpmlinux enterprise high performance computing 15 sp3-ltss2.4.51-150200.3.59.1Not reportedSUSE-SU-2023:4431-1Not reported
Suseapache2rpmlinux enterprise server 15 sp2-ltss2.4.51-150200.3.59.1Not reportedSUSE-SU-2023:4431-1Not reported
Suseapache2rpmlinux enterprise server 15 sp3-ltss2.4.51-150200.3.59.1Not reportedSUSE-SU-2023:4431-1Not reported
Suseapache2rpmlinux enterprise server for sap applications 15 sp22.4.51-150200.3.59.1Not reportedSUSE-SU-2023:4431-1Not reported
Suseapache2rpmlinux enterprise server for sap applications 15 sp32.4.51-150200.3.59.1Not reportedSUSE-SU-2023:4431-1Not reported
Suseapache2rpmmanager proxy 4.22.4.51-150200.3.59.1Not reportedSUSE-SU-2023:4431-1Not reported
Suseapache2rpmmanager server 4.22.4.51-150200.3.59.1Not reportedSUSE-SU-2023:4431-1Not reported
Suseapache2rpmenterprise storage 7.12.4.51-150200.3.59.1Not reportedSUSE-SU-2023:4431-1Not reported
Suseapache2rpmlinux enterprise high performance computing 15 sp1-ltss2.4.33-150000.3.78.1Not reportedSUSE-SU-2023:4432-1Not reported
Suseapache2rpmlinux enterprise server 15 sp1-ltss2.4.33-150000.3.78.1Not reportedSUSE-SU-2023:4432-1Not reported
Suseapache2rpmlinux enterprise server for sap applications 15 sp12.4.33-150000.3.78.1Not reportedSUSE-SU-2023:4432-1Not reported
Suseapache2rpmlinux enterprise module for basesystem 15 sp42.4.51-150400.6.14.1Not reportedSUSE-SU-2023:4430-1Not reported
Suseapache2rpmlinux enterprise module for basesystem 15 sp52.4.51-150400.6.14.1Not reportedSUSE-SU-2023:4430-1Not reported
Suseapache2rpmlinux enterprise module for package hub 15 sp42.4.51-150400.6.14.1Not reportedSUSE-SU-2023:4430-1Not reported
Suseapache2rpmlinux enterprise module for package hub 15 sp52.4.51-150400.6.14.1Not reportedSUSE-SU-2023:4430-1Not reported
Suseapache2rpmlinux enterprise module for server applications 15 sp42.4.51-150400.6.14.1Not reportedSUSE-SU-2023:4430-1Not reported
Suseapache2rpmlinux enterprise module for server applications 15 sp52.4.51-150400.6.14.1Not reportedSUSE-SU-2023:4430-1Not reported
Opensuseapache2rpmleap 15.42.4.51-150400.6.14.1Not reportedSUSE-SU-2023:4430-1Not reported
Opensuseapache2rpmleap 15.52.4.51-150400.6.14.1Not reportedSUSE-SU-2023:4430-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References