一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

漏洞公开时间：

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

VUL-0: CVE-2023-31122: apache2: Apache HTTP Server: mod_macro buffer over-read

漏洞公开时间：

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

VUL-0: CVE-2023-31122: apache2: Apache HTTP Server: mod_macro buffer over-read

漏洞公开时间：

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

漏洞公开时间：

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.57.References:https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122https://www.openwall.com/lists/oss-security/2023/10/19/4

漏洞公开时间：

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| redhat_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://www.openwall.com/lists/oss-security/2023/10/19/4 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.57.References:https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122https://www.openwall.com/lists/oss-security/2023/10/19/4

漏洞公开时间：

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| redhat_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://www.openwall.com/lists/oss-security/2023/10/19/4 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

漏洞公开时间：2023-10-23 07:15:11

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| redhat_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://www.openwall.com/lists/oss-security/2023/10/19/4 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

漏洞公开时间：2023-10-23 07:15:11

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| redhat_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://www.openwall.com/lists/oss-security/2023/10/19/4 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

| cve_search | | https://httpd.apache.org/security/vulnerabilities_24.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

漏洞公开时间：2023-10-23 07:15:11

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| redhat_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://www.openwall.com/lists/oss-security/2023/10/19/4 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

漏洞公开时间：2023-10-23 07:15:11

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| redhat_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://www.openwall.com/lists/oss-security/2023/10/19/4 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://svn.apache.org/viewvc?view=revision&revision=1912993 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

| cve_search | | https://httpd.apache.org/security/vulnerabilities_24.html |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| snyk | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://security.snyk.io/vuln/SNYK-UNMANAGED-APACHEHTTPD-6024000 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

漏洞公开时间：2023-10-23 07:15:11

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| redhat_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://www.openwall.com/lists/oss-security/2023/10/19/4 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://svn.apache.org/viewvc?view=revision&revision=1912993 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

| cve_search | | https://httpd.apache.org/security/vulnerabilities_24.html |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| snyk | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://security.snyk.io/vuln/SNYK-UNMANAGED-APACHEHTTPD-6024000 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

漏洞公开时间：2023-10-23 07:15:11

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

漏洞公开时间：2023-10-23 07:15:11

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| security.apache.org | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| redhat_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://www.openwall.com/lists/oss-security/2023/10/19/4 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://svn.apache.org/viewvc?view=revision&revision=1912993 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

| cve_search | | https://httpd.apache.org/security/vulnerabilities_24.html |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| snyk | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://security.snyk.io/vuln/SNYK-UNMANAGED-APACHEHTTPD-6024000 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

漏洞公开时间：2023-10-23 07:15:11

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| security.apache.org | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | |

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

漏洞公开时间：2023-10-23 07:15:11

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| security.apache.org | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | |

| security.apache.org | https://security.netapp.com/advisory/ntap-20231027-0011/ | |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| redhat_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://www.openwall.com/lists/oss-security/2023/10/19/4 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://svn.apache.org/viewvc?view=revision&revision=1912993 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

| cve_search | | https://httpd.apache.org/security/vulnerabilities_24.html |

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V2.0分值：

BaseScore：0.0 Low

Vector：CVSS：2.0/

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

漏洞公开时间：2023-10-23 07:15:11

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| security.apache.org | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | |

| security.apache.org | https://security.netapp.com/advisory/ntap-20231027-0011/ | |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| redhat_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://www.openwall.com/lists/oss-security/2023/10/19/4 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://svn.apache.org/viewvc?view=revision&revision=1912993 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

| cve_search | | https://httpd.apache.org/security/vulnerabilities_24.html |

| cve_search | | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ |

| cve_search | | https://security.netapp.com/advisory/ntap-20231027-0011/ |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| snyk | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://security.snyk.io/vuln/SNYK-UNMANAGED-APACHEHTTPD-6024000 |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(2.4.43):

2.openEuler-20.03-LTS-SP3(2.4.43):

3.openEuler-20.03-LTS-SP4:

4.openEuler-22.03-LTS(2.4.51):

5.openEuler-22.03-LTS-SP1(2.4.51):

6.openEuler-22.03-LTS-SP2(2.4.51):

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

漏洞公开时间：2023-10-23 07:15:11

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| security.apache.org | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | |

| security.apache.org | https://security.netapp.com/advisory/ntap-20231027-0011/ | |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| redhat_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://www.openwall.com/lists/oss-security/2023/10/19/4 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://svn.apache.org/viewvc?view=revision&revision=1912993 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

| cve_search | | https://httpd.apache.org/security/vulnerabilities_24.html |

| cve_search | | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ |

| cve_search | | https://security.netapp.com/advisory/ntap-20231027-0011/ |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| snyk | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://security.snyk.io/vuln/SNYK-UNMANAGED-APACHEHTTPD-6024000 |

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V3.0分值：

BaseScore：9.1 Critical

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

漏洞公开时间：2023-10-23 07:15:11

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| security.apache.org | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | |

| security.apache.org | https://security.netapp.com/advisory/ntap-20231027-0011/ | |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| redhat_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://www.openwall.com/lists/oss-security/2023/10/19/4 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://svn.apache.org/viewvc?view=revision&revision=1912993 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

| cve_search | | https://httpd.apache.org/security/vulnerabilities_24.html |

| cve_search | | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ |

| cve_search | | https://security.netapp.com/advisory/ntap-20231027-0011/ |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| snyk | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://security.snyk.io/vuln/SNYK-UNMANAGED-APACHEHTTPD-6024000 |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| security.apache.org | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | |

| security.apache.org | https://security.netapp.com/advisory/ntap-20231027-0011/ | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V3.0分值：

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

漏洞公开时间：2023-10-23 07:15:11

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| security.apache.org | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | |

| security.apache.org | https://security.netapp.com/advisory/ntap-20231027-0011/ | |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| redhat_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://www.openwall.com/lists/oss-security/2023/10/19/4 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://svn.apache.org/viewvc?view=revision&revision=1912993 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

| cve_search | | https://httpd.apache.org/security/vulnerabilities_24.html |

| cve_search | | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ |

| cve_search | | https://security.netapp.com/advisory/ntap-20231027-0011/ |

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V3.0分值：

BaseScore：7.5 High

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

漏洞公开时间：2023-10-23 07:15:11

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| security.apache.org | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | |

| security.apache.org | https://security.netapp.com/advisory/ntap-20231027-0011/ | |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| redhat_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://www.openwall.com/lists/oss-security/2023/10/19/4 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://svn.apache.org/viewvc?view=revision&revision=1912993 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

| cve_search | | https://httpd.apache.org/security/vulnerabilities_24.html |

| cve_search | | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ |

| cve_search | | https://security.netapp.com/advisory/ntap-20231027-0011/ |

| mageia | | http://advisories.mageia.org/MGASA-2023-0304.html |

| osv | https://httpd.apache.org/security/vulnerabilities_24.html | https://osv.dev/vulnerability/BIT-2023-31122 |

| osv | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | https://osv.dev/vulnerability/BIT-2023-31122 |

| osv | https://security.netapp.com/advisory/ntap-20231027-0011/ | https://osv.dev/vulnerability/BIT-2023-31122 |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| snyk | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://security.snyk.io/vuln/SNYK-UNMANAGED-APACHEHTTPD-6024000 |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| security.apache.org | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | |

| security.apache.org | https://security.netapp.com/advisory/ntap-20231027-0011/ | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

httpd的配置文件中使用mod_macro进行宏定义，且宏的字符串超长（大于最大值8192bit）时，存在越界读写的问题，导致服务数据泄露;

openEuler评分：

9.1

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(2.4.43):受影响

2.openEuler-20.03-LTS-SP3(2.4.43):受影响

3.openEuler-20.03-LTS-SP4:受影响

4.openEuler-22.03-LTS(2.4.51):受影响

5.openEuler-22.03-LTS-SP1(2.4.51):受影响

6.openEuler-22.03-LTS-SP2(2.4.51):受影响

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(2.4.43):否

2.openEuler-20.03-LTS-SP3(2.4.43):否

3.openEuler-20.03-LTS-SP4:否

4.openEuler-22.03-LTS(2.4.51):否

5.openEuler-22.03-LTS-SP1(2.4.51):否

6.openEuler-22.03-LTS-SP2(2.4.51):否

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V3.0分值：

BaseScore：7.5 High

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

漏洞公开时间：2023-10-23 07:15:11

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| security.apache.org | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | |

| security.apache.org | https://security.netapp.com/advisory/ntap-20231027-0011/ | |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| redhat_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://www.openwall.com/lists/oss-security/2023/10/19/4 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://svn.apache.org/viewvc?view=revision&revision=1912993 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

| cve_search | | https://httpd.apache.org/security/vulnerabilities_24.html |

| cve_search | | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ |

| cve_search | | https://security.netapp.com/advisory/ntap-20231027-0011/ |

| mageia | | http://advisories.mageia.org/MGASA-2023-0304.html |

| osv | https://httpd.apache.org/security/vulnerabilities_24.html | https://osv.dev/vulnerability/BIT-2023-31122 |

| osv | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | https://osv.dev/vulnerability/BIT-2023-31122 |

| osv | https://security.netapp.com/advisory/ntap-20231027-0011/ | https://osv.dev/vulnerability/BIT-2023-31122 |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| snyk | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://security.snyk.io/vuln/SNYK-UNMANAGED-APACHEHTTPD-6024000 |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| security.apache.org | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | |

| security.apache.org | https://security.netapp.com/advisory/ntap-20231027-0011/ | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

httpd的配置文件中使用mod_macro进行宏定义，且宏的字符串超长（大于最大值8192bit）时，存在越界读写的问题，导致服务数据泄露;

openEuler评分：

9.1

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(2.4.43):受影响

2.openEuler-20.03-LTS-SP3(2.4.43):受影响

3.openEuler-20.03-LTS-SP4:受影响

4.openEuler-22.03-LTS(2.4.51):受影响

5.openEuler-22.03-LTS-SP1(2.4.51):受影响

6.openEuler-22.03-LTS-SP2(2.4.51):受影响

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(2.4.43):否

2.openEuler-20.03-LTS-SP3(2.4.43):否

3.openEuler-20.03-LTS-SP4:否

4.openEuler-22.03-LTS(2.4.51):否

5.openEuler-22.03-LTS-SP1(2.4.51):否

6.openEuler-22.03-LTS-SP2(2.4.51):否

一、漏洞信息

漏洞编号：[CVE-2023-31122](https://nvd.nist.gov/vuln/detail/CVE-2023-31122)

漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)

漏洞归属的版本：2.4.43,2.4.46,2.4.48,2.4.51,2.4.55

CVSS V3.0分值：

BaseScore：7.5 High

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

漏洞简述：

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

漏洞公开时间：2023-10-23 07:15:11

漏洞创建时间：2023-10-19 22:03:57

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2023-31122

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| security.apache.org | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | |

| security.apache.org | https://security.netapp.com/advisory/ntap-20231027-0011/ | |

| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://httpd.apache.org/ | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-31122 | https://bugzilla.suse.com/show_bug.cgi?id=1216424 |

| redhat_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://www.openwall.com/lists/oss-security/2023/10/19/4 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| redhat_bugzilla | https://svn.apache.org/viewvc?view=revision&revision=1912993 | https://bugzilla.redhat.com/show_bug.cgi?id=2245332 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2023-31122 |

| cve_search | | https://httpd.apache.org/security/vulnerabilities_24.html |

| cve_search | | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ |

| cve_search | | https://security.netapp.com/advisory/ntap-20231027-0011/ |

| mageia | | http://advisories.mageia.org/MGASA-2023-0304.html |

| osv | https://httpd.apache.org/security/vulnerabilities_24.html | https://osv.dev/vulnerability/BIT-2023-31122 |

| osv | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | https://osv.dev/vulnerability/BIT-2023-31122 |

| osv | https://security.netapp.com/advisory/ntap-20231027-0011/ | https://osv.dev/vulnerability/BIT-2023-31122 |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31122 | https://explore.alas.aws.amazon.com/CVE-2023-31122.html |

| snyk | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-31122 | https://security.snyk.io/vuln/SNYK-UNMANAGED-APACHEHTTPD-6024000 |

| security.apache.org | https://httpd.apache.org/security/vulnerabilities_24.html | |

| security.apache.org | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TI3V2YCEUM65QDYPGGNUZ7UONIM5OEXC/ | |

| security.apache.org | https://security.netapp.com/advisory/ntap-20231027-0011/ | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

9.1

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

受影响版本排查(受影响/不受影响)：

1.openEuler-20.03-LTS-SP1(2.4.43):受影响

2.openEuler-20.03-LTS-SP3(2.4.43):受影响

3.openEuler-20.03-LTS-SP4:受影响

4.openEuler-22.03-LTS(2.4.51):受影响

5.openEuler-22.03-LTS-SP1(2.4.51):受影响

6.openEuler-22.03-LTS-SP2(2.4.51):受影响

修复是否涉及abi变化(是/否)：

1.openEuler-20.03-LTS-SP1(2.4.43):否

2.openEuler-20.03-LTS-SP3(2.4.43):否

3.openEuler-20.03-LTS-SP4:否

4.openEuler-22.03-LTS(2.4.51):否

5.openEuler-22.03-LTS-SP1(2.4.51):否

6.openEuler-22.03-LTS-SP2(2.4.51):否