IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.3Yüksek

CVE-2026-48913Apache HTTP Server: mod_http2 memory corruption when file handles exhausted

Apache Software Foundation Apache HTTP Server Yayım: (5 ay önce)

Açıklama

Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.

Zayıflık türü (CWE): CWE-416

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Apache Software Foundation Apache HTTP Server 2.4.55 – ≤ 2.4.67
apache http server 2.4.55 – < 2.4.68

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (1)
  • cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:* ≥ 2.4.55 < 2.4.68

Aynı üründe son açıklar — Apache HTTP Server

7.5Yüksek
CVE-2026-63686

Apache HTTP Server: mod_xml2enc crash on charset conversion failure

Apache Software Foundation Apache HTTP Server

A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds…

8.8Yüksek
CVE-2026-93546

Apache HTTP Server: mod_dav_fs namespace overflow

Apache Software Foundation Apache HTTP Server

Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces.

5.3Orta
CVE-2026-79768

Apache HTTP Server: mod_userdir information disclosure

Apache Software Foundation Apache HTTP Server

Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form in https://httpd.apache.org/docs/2.4/mod/mod_userdir.html#userdir) This issue…