{"id":"CVE-2026-23918","aliases":["ALPINE-CVE-2026-23918","AZL-86004","BELL-CVE-2026-23918","BIT-apache-2026-23918","CLSA-2026-1778054005","CLSA-2026-1778070287","CLSA-2026-1778107205","DEBIAN-CVE-2026-23918","EUVD-2026-26955","GHSA-p8fm-9c82-pw4g","MGASA-2026-0129","RHSA-2026:13938","SUSE-SU-2026:2103-1","SUSE-SU-2026:2104-1","SUSE-SU-2026:22199-1","SUSE-SU-2026:22209-1","SUSE-SU-2026:2641-1","SUSE-SU-2026:2686-1","UBUNTU-CVE-2026-23918","USN-8239-1","openSUSE-SU-2026:10785-1","openSUSE-SU-2026:21115-1"],"status":"published","title":"Apache HTTP Server: http2: double free and possible RCE on early reset","description":"Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.49727,"percentile":0.98905,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-1341","CWE-415"],"published":"2026-05-04T14:44:28Z","modified":"2026-10-28T02:30:45Z","exploits":[{"source":"pocgithub","id":"12lie20/CVE-2026-23918-test","title":"12lie20/CVE-2026-23918-test","date":"2026-05-05","url":"https://github.com/12lie20/CVE-2026-23918-test"},{"source":"pocgithub","id":"aa022/CVE-2026-23918-Passive-Audit","title":"aa022/CVE-2026-23918-Passive-Audit","date":"2026-05-05","url":"https://github.com/aa022/CVE-2026-23918-Passive-Audit"},{"source":"pocgithub","id":"qassam-315/CVE-2026-23918-Elite-Auditor","title":"qassam-315/CVE-2026-23918-Elite-Auditor","date":"2026-05-05","url":"https://github.com/qassam-315/CVE-2026-23918-Elite-Auditor"},{"source":"pocgithub","id":"rshosting/Apache-CVE-2026-23918-fix","title":"rshosting/Apache-CVE-2026-23918-fix","date":"2026-05-05","url":"https://github.com/rshosting/Apache-CVE-2026-23918-fix"},{"source":"pocgithub","id":"CYFARE/CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC","title":"CYFARE/CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC","date":"2026-05-06","url":"https://github.com/CYFARE/CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC"},{"source":"pocgithub","id":"hackervlogofficial/CVE-2026-23918","title":"hackervlogofficial/CVE-2026-23918","date":"2026-05-06","url":"https://github.com/hackervlogofficial/CVE-2026-23918"},{"source":"pocgithub","id":"rhasan-com/CVE-2026-23918","title":"rhasan-com/CVE-2026-23918","date":"2026-05-06","url":"https://github.com/rhasan-com/CVE-2026-23918"},{"source":"pocgithub","id":"seguridadentrerios/CVE-2026-23918","title":"seguridadentrerios/CVE-2026-23918","date":"2026-05-06","url":"https://github.com/seguridadentrerios/CVE-2026-23918"},{"source":"pocgithub","id":"xeloxa/CVE-2026-23918-Apache-H2-PoC","title":"xeloxa/CVE-2026-23918-Apache-H2-PoC","date":"2026-05-06","url":"https://github.com/xeloxa/CVE-2026-23918-Apache-H2-PoC"},{"source":"pocgithub","id":"alt3kx/CVE-2026-23918","title":"alt3kx/CVE-2026-23918","date":"2026-05-07","url":"https://github.com/alt3kx/CVE-2026-23918"},{"source":"pocgithub","id":"insomnisec/Detections-CVE-2026-23918","title":"insomnisec/Detections-CVE-2026-23918","date":"2026-05-08","url":"https://github.com/insomnisec/Detections-CVE-2026-23918"},{"source":"pocgithub","id":"striga-ai/CVE-2026-23918","title":"striga-ai/CVE-2026-23918","date":"2026-05-11","url":"https://github.com/striga-ai/CVE-2026-23918"},{"source":"pocgithub","id":"Bencodin/CVE-2026-23918-poc","title":"Bencodin/CVE-2026-23918-poc","date":"2026-05-13","url":"https://github.com/Bencodin/CVE-2026-23918-poc"},{"source":"pocgithub","id":"sibersan/apache_audit_cve-2026-23918","title":"sibersan/apache_audit_cve-2026-23918","date":"2026-05-16","url":"https://github.com/sibersan/apache_audit_cve-2026-23918"},{"source":"exploitdb","id":"EDB-52577","title":"Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service","type":"webapps","platform":"multiple","date":"2026-05-26","url":"https://www.exploit-db.com/exploits/52577"},{"source":"pocgithub","id":"gagaltotal/CVE-2026-23918-Double-free-Apache-httpd-mod_http2","title":"gagaltotal/CVE-2026-23918-Double-free-Apache-httpd-mod_http2","date":"2026-06-28","url":"https://github.com/gagaltotal/CVE-2026-23918-Double-free-Apache-httpd-mod_http2"}],"fixes":[{"ecosystem":"Alpine:v3.20","package":"apache2","fixed_in":["2.4.67-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"apache2","fixed_in":["2.4.67-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"apache2","fixed_in":["2.4.67-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"apache2","fixed_in":["2.4.67-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"apache2","fixed_in":["2.4.67-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"httpd","fixed_in":["2.4.67-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"apache2","fixed_in":["2.4.67-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"apache2","fixed_in":["2.4.67-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"apache2","fixed_in":["2.4.67-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"apache","fixed_in":["2.4.67"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-bin","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-data","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-dev","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-doc","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-ssl-dev","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-suexec-custom","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-suexec-pristine","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-utils","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libapache2-mod-md","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libapache2-mod-proxy-uwsgi","fixed_in":["2.4.41-4ubuntu3.23+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"mod_http2","fixed_in":["2.0.26-4.el9_6.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2","fixed_in":["2.4.59-1~deb10u1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2-bin","fixed_in":["2.4.59-1~deb10u1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2-data","fixed_in":["2.4.59-1~deb10u1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2-dev","fixed_in":["2.4.59-1~deb10u1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2-doc","fixed_in":["2.4.59-1~deb10u1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2-ssl-dev","fixed_in":["2.4.59-1~deb10u1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2-suexec-custom","fixed_in":["2.4.59-1~deb10u1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2-suexec-pristine","fixed_in":["2.4.59-1~deb10u1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"apache2-utils","fixed_in":["2.4.59-1~deb10u1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libapache2-mod-md","fixed_in":["2.4.59-1~deb10u1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libapache2-mod-proxy-uwsgi","fixed_in":["2.4.59-1~deb10u1+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"apache2","fixed_in":["2.4.67-1~deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"apache2","fixed_in":["2.4.66-1~deb13u2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"apache2","fixed_in":["2.4.66-5"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"apache2","fixed_in":["2.4.66-2ubuntu2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"apache2","fixed_in":["2.4.52-1ubuntu4.20"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"apache2","fixed_in":["2.4.58-1ubuntu8.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"apache2","fixed_in":["2.4.64-1ubuntu3.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.67-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.67-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.67-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.67-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.67-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.67-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.54-r2"},{"fixed":"2.4.67-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.63-r0"},{"fixed":"2.4.67-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.56-r0"},{"fixed":"2.4.67-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"apache","ranges":[{"type":"SEMVER","events":[{"introduced":"2.4.66"},{"fixed":"2.4.67"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-ssl-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-suexec-custom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-suexec-pristine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libapache2-mod-md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libapache2-mod-proxy-uwsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.23+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.26-4.el9_6.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2-ssl-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2-suexec-custom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2-suexec-pristine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libapache2-mod-md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libapache2-mod-proxy-uwsgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.67-1~deb12u2"}]}],"versions":["2.4.57-2","2.4.57-3","2.4.58-1","2.4.59-1","2.4.59-1~deb10u1","2.4.59-1~deb11u1","2.4.59-1~deb12u1","2.4.59-2","2.4.60-1","2.4.61-1","2.4.61-1~deb11u1","2.4.61-1~deb12u1","2.4.62-1","2.4.62-1~deb11u1","2.4.62-1~deb11u2","2.4.62-1~deb12u1","2.4.62-1~deb12u2","2.4.62-2","2.4.62-3","2.4.62-4","2.4.62-5","2.4.62-6","2.4.63-1","2.4.64-1","2.4.65-1","2.4.65-1~deb11u1","2.4.65-1~deb12u1","2.4.65-2","2.4.65-3","2.4.66-1","2.4.66-1~deb11u1","2.4.66-1~deb12u1","2.4.66-1~deb12u2","2.4.66-1~deb13u1","2.4.66-1~deb13u2","2.4.66-2","2.4.66-3","2.4.66-4","2.4.66-5","2.4.66-6","2.4.66-7","2.4.66-8","2.4.67-1~deb11u1","2.4.67-1~deb11u2","2.4.67-1~deb11u3","2.4.67-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-1~deb13u2"}]}],"versions":["2.4.65-2","2.4.65-3","2.4.66-1~deb11u1","2.4.66-1~deb12u1","2.4.66-1~deb12u2","2.4.66-1~deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-5"}]}],"versions":["2.4.65-2","2.4.65-3","2.4.66-1","2.4.66-1~deb11u1","2.4.66-1~deb12u1","2.4.66-1~deb12u2","2.4.66-1~deb13u1","2.4.66-1~deb13u2","2.4.66-2","2.4.66-3","2.4.66-4"]},{"source":"osv","ecosystem":"Mageia:9","package":"apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.67-1.mga9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.67-0.1.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"httpd-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.67-0.1.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.67-0.1.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.67-0.1.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.67-0.1.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.67-0.1.hum1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-event","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-prefork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-event","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-prefork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-event","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-prefork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"apache2-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-event","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-prefork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"apache2-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-35.78.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"apache2-tls13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-35.78.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-35.78.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"apache2-tls13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-35.78.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-2ubuntu2.1"}]}],"versions":["2.4.64-1ubuntu3","2.4.65-3ubuntu1","2.4.66-2ubuntu1","2.4.66-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-1ubuntu4.20"}]}],"versions":["2.4.48-3.1ubuntu3","2.4.48-3.1ubuntu4","2.4.51-2ubuntu1","2.4.52-1ubuntu1","2.4.52-1ubuntu2","2.4.52-1ubuntu4","2.4.52-1ubuntu4.1","2.4.52-1ubuntu4.2","2.4.52-1ubuntu4.3","2.4.52-1ubuntu4.4","2.4.52-1ubuntu4.5","2.4.52-1ubuntu4.6","2.4.52-1ubuntu4.7","2.4.52-1ubuntu4.8","2.4.52-1ubuntu4.9","2.4.52-1ubuntu4.10","2.4.52-1ubuntu4.11","2.4.52-1ubuntu4.12","2.4.52-1ubuntu4.13","2.4.52-1ubuntu4.14","2.4.52-1ubuntu4.15","2.4.52-1ubuntu4.16","2.4.52-1ubuntu4.18","2.4.52-1ubuntu4.19"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.58-1ubuntu8.12"}]}],"versions":["2.4.57-2ubuntu2","2.4.57-2ubuntu3","2.4.58-1ubuntu1","2.4.58-1ubuntu2","2.4.58-1ubuntu6","2.4.58-1ubuntu7","2.4.58-1ubuntu8","2.4.58-1ubuntu8.1","2.4.58-1ubuntu8.2","2.4.58-1ubuntu8.3","2.4.58-1ubuntu8.4","2.4.58-1ubuntu8.5","2.4.58-1ubuntu8.6","2.4.58-1ubuntu8.7","2.4.58-1ubuntu8.8","2.4.58-1ubuntu8.10","2.4.58-1ubuntu8.11"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.64-1ubuntu3.4"}]}],"versions":["2.4.63-1ubuntu1","2.4.63-1ubuntu3","2.4.64-1ubuntu2","2.4.64-1ubuntu3","2.4.64-1ubuntu3.2","2.4.64-1ubuntu3.3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-2ubuntu2.1"}]}],"versions":["2.4.64-1ubuntu3","2.4.65-3ubuntu1","2.4.66-2ubuntu1","2.4.66-2ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.67-1.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"apache2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"apache2-event","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"apache2-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"apache2-prefork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"apache2-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-160000.2.1"}]}],"bundled":11}],"products":[{"vendor":"apache","product":"http_server"},{"vendor":"apache software foundation","product":"apache http server"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat jboss core services"}],"references":[{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["vendor-advisory","Vendor Advisory","advisory","web","article"]},{"url":"http://www.openwall.com/lists/oss-security/2026/05/04/19","tags":["Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-23918","tags":["vdb-entry","x_refsource_REDHAT","web","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2465304","tags":["issue-tracking","x_refsource_REDHAT","web","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23918.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13938","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23918","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-p8fm-9c82-pw4g"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-23918","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-23918","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1778054005.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1778070287.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1778107205.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23918.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-23918","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0129.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35473","tags":["report"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2026\u0026m=slackware-security.435691","tags":["web"]},{"url":"https://downloads.apache.org/httpd/CHANGES_2.4.67","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/04/15","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/04/16","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/04/17","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/04/18","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/04/19","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/04/20","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/04/21","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/04/22","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/04/23","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/05/6","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/05/9","tags":["web"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-24072","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34032","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33007","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34059","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33857","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13938.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-23918","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464941","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-24072","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24072","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2465299","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33007","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464953","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33857","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464952","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34032","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34032","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464940","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34059","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262103-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1263935","tags":["report"]},{"url":"https://bugzilla.suse.com/1263950","tags":["report"]},{"url":"https://bugzilla.suse.com/1263951","tags":["report"]},{"url":"https://bugzilla.suse.com/1263952","tags":["report"]},{"url":"https://bugzilla.suse.com/1263953","tags":["report"]},{"url":"https://bugzilla.suse.com/1263954","tags":["report"]},{"url":"https://bugzilla.suse.com/1263955","tags":["report"]},{"url":"https://bugzilla.suse.com/1263956","tags":["report"]},{"url":"https://bugzilla.suse.com/1263957","tags":["report"]},{"url":"https://bugzilla.suse.com/1264150","tags":["report"]},{"url":"https://bugzilla.suse.com/1264163","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34059","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262104-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622199-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622209-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262641-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1207327","tags":["report"]},{"url":"https://bugzilla.suse.com/1208708","tags":["report"]},{"url":"https://bugzilla.suse.com/1214357","tags":["report"]},{"url":"https://bugzilla.suse.com/690734","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262686-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1267503","tags":["report"]},{"url":"https://bugzilla.suse.com/1267955","tags":["report"]},{"url":"https://bugzilla.suse.com/1267956","tags":["report"]},{"url":"https://bugzilla.suse.com/1267962","tags":["report"]},{"url":"https://bugzilla.suse.com/1267963","tags":["report"]},{"url":"https://bugzilla.suse.com/1267965","tags":["report"]},{"url":"https://bugzilla.suse.com/1267969","tags":["report"]},{"url":"https://bugzilla.suse.com/1267970","tags":["report"]},{"url":"https://bugzilla.suse.com/1267971","tags":["report"]},{"url":"https://bugzilla.suse.com/1267972","tags":["report"]},{"url":"https://bugzilla.suse.com/1267976","tags":["report"]},{"url":"https://bugzilla.suse.com/1267977","tags":["report"]},{"url":"https://bugzilla.suse.com/1267978","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2006-20001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-27522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-31122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-38709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-40725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49975","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-23918","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8239-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-24072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-28780","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-29168","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-29169","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-33006","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-33007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-33523","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-33857","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-34059","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-23918","title":"Apache HTTP Server: http2: double free and possible RCE on early reset","description":"Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.","status":"published","published":"2026-05-04T14:44:28.513Z","modified":"2026-07-15T01:17:47.323Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-415","CWE-1341"],"updated_at":"2026-11-02T13:42:26.790871Z"}],"euvd":[{"id":"EUVD-2026-26955","description":"Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.","status":"published","published":"2026-05-04T14:44:28Z","modified":"2026-07-15T01:17:47Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:19:55.318488Z"}],"ghsa":[{"id":"GHSA-p8fm-9c82-pw4g","title":"Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis...","description":"Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.","status":"published","published":"2026-05-04T15:31:15Z","modified":"2026-06-30T03:36:29Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-415","CWE-1341"],"updated_at":"2026-11-02T15:09:04.668745Z"}],"nvd":[{"id":"CVE-2026-23918","description":"Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.","status":"published","published":"2026-05-04T15:16:03.583Z","modified":"2026-10-26T19:10:00.163Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-415","CWE-1341"],"updated_at":"2026-11-02T14:12:17.022502Z"}],"osv":[{"id":"ALPINE-CVE-2026-23918","description":"Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.","status":"published","published":"2026-05-04T15:16:03.583Z","modified":"2026-10-01T02:17:49.212548229Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"BELL-CVE-2026-23918","status":"published","published":"2026-05-05T17:18:59.298778Z","modified":"2026-05-07T07:16:37.733264Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:23.315185Z"},{"id":"CVE-2026-23918","title":"Apache HTTP Server: http2: double free and possible RCE on early reset","description":"Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.","status":"published","published":"2026-05-04T14:44:28.513Z","modified":"2026-10-28T02:30:45.24139996Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T15:44:59.079784Z"},{"id":"DEBIAN-CVE-2026-23918","description":"Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.  This issue affects Apache HTTP Server: 2.4.66.  Users are recommended to upgrade to version 2.4.67, which fixes the issue.","status":"published","published":"2026-05-04T15:16:03.583Z","modified":"2026-10-27T09:47:37.189445577Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:53.516942Z"},{"id":"RHSA-2026:13938","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-05-07T10:07:43Z","modified":"2026-10-15T10:12:57Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"UBUNTU-CVE-2026-23918","description":"Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.","status":"published","published":"2026-05-05T00:00:00Z","modified":"2026-06-30T18:17:37.85814671Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:04.456047Z"},{"id":"AZL-86004","title":"CVE-2026-23918 affecting package httpd for versions less than 2.4.67-1","description":"Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.","status":"published","published":"2026-05-04T15:16:03Z","modified":"2026-08-28T17:56:41.082866Z","updated_at":"2026-11-02T15:28:10.677811Z"},{"id":"BIT-apache-2026-23918","title":"Apache HTTP Server: http2: double free and possible RCE on early reset","description":"Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.","status":"published","published":"2026-05-05T08:38:57.247Z","modified":"2026-09-08T08:45:32.978339769Z","updated_at":"2026-11-02T15:28:28.267217Z"},{"id":"CLSA-2026-1778054005","title":"Fix CVE(s): CVE-2026-23918","description":"   * SECURITY UPDATE: double free and possible remote code execution via\n     HTTP/2 stream double-purge in mod_http2\n     - debian/patches/CVE-2026-23918.patch: prevent double purge of a\n       stream by introducing add_for_purge() helper that checks for\n       duplicates before adding to the purge queue in\n       modules/http2/h2_mplx.c\n     - CVE-2026-23918","status":"published","published":"2026-05-06T12:06:20Z","modified":"2026-06-04T10:03:37.977721Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778070287","title":"mod_http2: Fix of CVE-2026-23918","description":"- CVE-2026-23918: fix double free via double stream purge in mod_http2","status":"published","published":"2026-05-06T12:24:54Z","modified":"2026-06-01T00:30:10.808779228Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778107205","title":"Fix CVE(s): CVE-2026-23918","description":"   * SECURITY UPDATE: double free / possible RCE in mod_http2 stream purge\n     - debian/patches/CVE-2026-23918.patch: deduplicate inserts into the\n       spurge array in modules/http2/h2_mplx.c via a new add_for_purge()\n       helper to prevent the same h2_stream from being freed twice.\n     - CVE-2026-23918","status":"published","published":"2026-05-06T22:40:15Z","modified":"2026-06-04T10:03:43.709873Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"MGASA-2026-0129","title":"Updated apache packages fix security vulnerabilities","description":"http2: double free and possible RCE on early reset. (CVE-2026-23918)\nmod_rewrite elevation of privileges via ap_expr. (CVE-2026-24072)\nbuffer overflow in mod_proxy_ajp via ajp_msg_check_header().\n(CVE-2026-28780)\nmod_md unrestricted OCSP response. (CVE-2026-29168)\nmod_dav_lock indirect lock crash. (CVE-2026-29169)\nmod_auth_digest timing attack. (CVE-2026-33006)\nmod_authn_socache crash. (CVE-2026-33007)\nHTTP response splitting forwarding malicious status line.\n(CVE-2026-33523)\nOff-by-one OOB reads in AJP getter functions. (CVE-2026-33857)\nHeap Buffer Over-Read Due to Missing Null-Termination Check\n(ajp_msg_get_string). (CVE-2026-34032)\nHeap Over-Read and memory disclosure in ajp_parse_data().\n(CVE-2026-34059)\n","status":"published","published":"2026-05-13T07:00:52Z","modified":"2026-05-13T07:16:51.561604Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10785-1","title":"apache2-2.4.67-1.1 on GA media","description":"These are all security issues fixed in the apache2-2.4.67-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-16T00:00:00Z","modified":"2026-05-17T14:18:07.414299Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:21115-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues\n\n- CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).\n- CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).\n- CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).\n- CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).\n- CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests (bsc#1263956).\n- CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).\n- CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to crash a child\n  processes (bsc#1263954).\n- CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).\n- CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).\n- CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check (bsc#1263951).\n- CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).\n","status":"published","published":"2026-06-20T06:56:29Z","modified":"2026-06-30T18:24:42.659619965Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:2103-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues\n\n- CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).\n- CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).\n- CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).\n- CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).\n- CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests (bsc#1263956).\n- CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).\n- CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to crash a child\n  processes (bsc#1263954).\n- CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).\n- CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).\n- CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check (bsc#1263951).\n- CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).\n","status":"published","published":"2026-05-28T12:34:09Z","modified":"2026-05-29T08:15:05.023619486Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:2104-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues\n\n- CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).\n- CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).\n- CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).\n- CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).\n- CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests (bsc#1263956).\n- CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).\n- CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to crash a child\n  processes (bsc#1263954).\n- CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).\n- CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).\n- CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check (bsc#1263951).\n- CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).\n","status":"published","published":"2026-05-28T14:03:05Z","modified":"2026-05-29T08:15:06.442668147Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:22199-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues\n\n- CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).\n- CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).\n- CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).\n- CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).\n- CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests (bsc#1263956).\n- CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).\n- CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to crash a child\n  processes (bsc#1263954).\n- CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).\n- CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).\n- CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check (bsc#1263951).\n- CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).\n","status":"published","published":"2026-06-20T06:57:50Z","modified":"2026-06-24T09:00:08.114414454Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:22209-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues\n\n- CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).\n- CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).\n- CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).\n- CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).\n- CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests (bsc#1263956).\n- CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).\n- CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to crash a child\n  processes (bsc#1263954).\n- CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).\n- CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).\n- CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check (bsc#1263951).\n- CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).\n","status":"published","published":"2026-06-20T06:57:50Z","modified":"2026-06-24T09:00:09.405887706Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:2641-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues\n\nUpdate to 2.4.66 (jsc#PED-16334):\n\nSecurity issues:\n\n- CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).\n- CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).\n- CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).\n- CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).\n- CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests (bsc#1263956).\n- CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).\n- CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to crash a child\n  processes (bsc#1263954).\n- CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).\n- CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).\n- CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check (bsc#1263951).\n- CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).\n\nNon security issue:\n\n- Internal server error on very long URL (bsc#690734).\n","status":"published","published":"2026-08-27T14:44:16Z","modified":"2026-08-27T17:41:24.314249315Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:2686-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues\n\n- CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).\n- CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).\n- CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).\n- CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).\n- CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).\n- CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests (bsc#1263956).\n- CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).\n- CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).\n- CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to crash a child\n  processes (bsc#1263954).\n- CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).\n- CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).\n- CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check (bsc#1263951).\n- CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).\n- CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).\n- CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).\n- CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).\n- CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).\n- CVE-2026-43951: out-of-bound read in `merge_response_headers` can cause crash (bsc#1267963).\n- CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).\n- CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP `send_request` (bsc#1267969).\n- CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of\n  service (bsc#1267970).\n- CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).\n- CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free\n  (bsc#1267972).\n- CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).\n\nNon security issue:\n\n- Update to 2.4.66 (jsc#PED-16334).\n","status":"published","published":"2026-06-29T22:36:03Z","modified":"2026-07-01T09:45:04.712117752Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"USN-8239-1","title":"apache2 vulnerabilities","description":"Bartlomiej Dmitruk and Stanislaw Strzalkowski discovered that Apache\nHTTP Server incorrectly handled certain memory operations when using the\nHTTP/2 protocol. A remote attacker could use this issue to cause Apache\nHTTP Server to crash, resulting in a denial of service, or possibly execute\narbitrary code. This issue only affected Ubuntu 26.04 LTS.\n(CVE-2026-23918)\n\nIt was discovered that the Apache HTTP Server mod_rewrite module\nincorrectly handled certain privileges. A local attacker could possibly use\nthis issue to obtain sensitive information. (CVE-2026-24072)\n\nAndrew Lacambra, Elhanan Haenel, Tianshuo Han, and Tristan Madani\ndiscovered that the Apache HTTP Server mod_proxy_ajp module incorrectly\nhandled certain AJP server messages. An attacker in control of a backend\nAJP server could use this issue to cause Apache HTTP Server to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2026-28780)\n\nPavel Kohout discovered that Apache HTTP Server did not properly limit\nresource allocation in mod_md when processing OCSP response data. A\nremote attacker could possibly use this issue to cause a denial of\nservice. (CVE-2026-29168)\n\nPavel Kohout discovered that the Apache HTTP Server incorrectly handled\ncertain memory operations in mod_dav_lock. A remote attacker could possibly\nuse this issue to cause Apache HTTP Server to crash, resulting in a denial\nof service. (CVE-2026-29169)\n\nNitescu Lucian discovered that Apache HTTP Server had a timing attack\nvulnerability in mod_auth_digest. A remote attacker could possibly\nuse this issue to bypass Digest authentication. (CVE-2026-33006)\n\nPavel Kohout and Arkadi Vainbrand discovered that Apache HTTP Server\nincorrectly handled certain memory operations in mod_authn_socache. A\nremote attacker could possibly use this issue to cause Apache HTTP Server\nto crash, resulting in a denial of service. (CVE-2026-33007)\n\nHaruki Oyama, Merih Mengisteab, and Dawit Jeong discovered that\nApache HTTP Server had an HTTP response splitting vulnerability in\nmultiple modules when used with untrusted or compromised backend\nservers. An attacker could possibly use this issue to inject arbitrary\nHTTP headers. (CVE-2026-33523)\n\nElhanan Haenel discovered that Apache HTTP Server incorrectly handled\ncertain memory operations in mod_proxy_ajp. A remote attacker could\npossibly use this issue to cause Apache HTTP Server to crash, resulting in\na denial of service. (CVE-2026-33857)\n\nTianshuo Han and Jérôme Djouder discovered that Apache HTTP Server\nincorrectly handled certain string operations in mod_proxy_ajp. A remote\nattacker could possibly use this issue to obtain sensitive information.\n(CVE-2026-34032)\n\nElhanan Haenel discovered that Apache HTTP Server incorrectly handled\ncertain memory operations in mod_proxy_ajp. A remote attacker could use\nthis issue to cause Apache HTTP Server to crash, resulting in a denial of\nservice, or possibly obtain sensitive information. (CVE-2026-34059)","status":"published","published":"2026-05-06T19:55:12Z","modified":"2026-06-30T18:15:57.892021047Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}