Vulnerability fixed in Apache HTTP Server

Apache has addressed a vulnerability in the Apache HTTP Server, specifically in the modhttp2 module versions 2.4.55 through 2.4.70 and the modh2 module versions 2.0.8 through 2.0.42. The vulnerability involves a concurrency issue in the assignheaders function of both the modhttp2 and modh2 module...

Exploit for CVE-2026-119618

CVE-2026-119618 — Apache httpd modhttp2 heap corruption in...

Exploit for CVE-2026-119618

apache-httpd-scanner Local triage for the Apache HTTP Serv...

[slackware-security] httpd

New httpd packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/httpd-2.4.71-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues: Heap corruption and RCE in assignheaders...

CVE-2026-119618

Concurrent Execution using Shared Resource with Improper Synchronizati...

Exploit for CVE-2026-119618

CVE-2026-119618 — Apache HTTP Server modhttp2 assignheaders...

CVE-2026-119618

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

ALPINE-CVE-2026-119618

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

DEBIAN-CVE-2026-119618

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

CVE-2026-119618

The Apache HTTP Server is affected by a critical vulnerability in the mod_http2 module within the assign_headers() function. The issue is caused by Concurrent Execution using Shared Resource with Improper Synchronization (CWE-362), which can lead to heap corruption and Remote Code Execution (RCE)...

EUVD-2026-123532

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

CVE-2026-119618

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

CVE-2026-119618

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

CVE-2026-119618 Apache HTTP Server: mod_http2: heap corruption and RCE in assign_headers

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

Rocky Linux 9.6 [TuxCare] Security Update: mod_http2 (ALMALINUX9.6:CLSA-2026:1794423962)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794423962 advisory. - Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders...

CVE-2026-119618: Apache Software Foundation Apache HTTP Server: Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's…

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

AlmaLinux 9.6 [TuxCare] Security Update: mod_http2 (ALMALINUX9.6:CLSA-2026:1794423962)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794423962 advisory. - Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders ca...