IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.3Hoch

CVE-2026-48913Apache HTTP Server: mod_http2 memory corruption when file handles exhausted

Apache Software Foundation Apache HTTP Server Veröffentlicht: (vor 5 Monaten)

Beschreibung

Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.

Schwachstellentyp (CWE): CWE-416

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Apache Software Foundation Apache HTTP Server 2.4.55 – ≤ 2.4.67
apache http server 2.4.55 – < 2.4.68

Referenzen und Patches

CPE-Treffer (NVD) (1)
  • cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:* ≥ 2.4.55 < 2.4.68

Neue CVEs im selben Produkt — Apache HTTP Server

7.5Hoch
CVE-2026-63686

Apache HTTP Server: mod_xml2enc crash on charset conversion failure

Apache Software Foundation Apache HTTP Server

A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds…

8.8Hoch
CVE-2026-93546

Apache HTTP Server: mod_dav_fs namespace overflow

Apache Software Foundation Apache HTTP Server

Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces.

5.3Mittel
CVE-2026-79768

Apache HTTP Server: mod_userdir information disclosure

Apache Software Foundation Apache HTTP Server

Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form in https://httpd.apache.org/docs/2.4/mod/mod_userdir.html#userdir) This issue…