CVE-2026-23918-Double-free-Apache-httpd-mod_http2

CVE-2026-23918 - Apache httpd modhttp2 PoC 本仓库包含一个使用 Go 编写的概念验证实现，针对 Apache httpd 中 modhttp2 的预认证内存破坏场景。本仓库中的代码演示了针对易受攻击目标的喷射-触发（spray-and-trigger）方法，旨在用于经授权的安全研究、测试和防御性分析。 概述 该项目聚焦于 CVE-2026-23918 的概念验证利用，并在 exploitpoc.go 中提供了单文件实现。该程序： 构建一个特制的 HTTP 请求负载 对目标服务执行内存喷射活动 发送 HTTP/2 触发序列...

CVE-2026-23918

CVE-2026-23918：Apache HTTP/2 双重释放 DoS CVE-2026-23918 | Apache HTTP Server 2.4.66 | CWE-415：双重释放 | CVSS 8.8 | 已在 2.4.67 中修复 modhttp2（h2mplx.c）中的双重释放漏洞允许远程攻击者通过快速的 RSTSTREAM 帧触发 c1c2streamjoined 与 mstreamcleanup 之间的竞争条件，从而导致拒绝服务（工作进程崩溃）。 快速开始 root@kitploit: 1. Start the lab docker-compose up --buil...

CVE-2026-23918

CVE-2026-23918 Doble liberación en la limpieza de flujos de modhttp2 de Apache httpd que conduce a una ejecución remota de código RCE sin autenticación. Afectado: httpd 2.4.66 con modhttp2 y MPM de múltiples subprocesos event/worker. Corregido en: 2.4.67. Encontrado y reportado por Bartlomiej...

CVE-2026-23918

Detector de Doble Liberación CVE-2026-23918 Apache modhttp2 https://github.com/user-attachments/assets/d6c30e58-548c-4b6d-9ba3-baa667238a58 root@kitploit: python3 h2ghost.py -h usage: h2ghost.py -h --host HOST --port PORT --tls --no-tls --iterations ITERATIONS --burst-n BURSTN --timeout TIMEOUT...

Detections-CVE-2026-23918

迁移至：https://github.com/insomnisec/publiccvedetections 为了更好地长期管理检测发布 本仓库将于2026年6月移除 请移步使用另一个仓库 CVE-2026-23918 "Apache HTTP/2 双重释放" — 检测与响应包 发布时间： 2026-05-04 CVSSv3： 8.8 高危 类型： 远程代码执行 / 拒绝服务（双重释放内存损坏） 组件： Apache HTTP Server 的 modhttp2（h2mplx.c 流清理路径） 受影响版本： 启用了 HTTP/2 且使用多线程 MPM 的 Apache HTTP Serve...

CVE-2026-23918-Apache-H2-PoC

CVE-2026-23918-Apache-H2-PoC Este es un exploit de prueba de concepto para la vulnerabilidad de doble liberación en modhttp2 de Apache CVE-2026-23918. Es un bug desagradable que afecta a la ruta de limpieza de streams en h2mplx.c. Básicamente, si sincronizas bien el momento, puedes lograr que el...

CVE-2026-23918-test

CVE-2026-23918-test Este repositorio contiene una Prueba de Concepto PoC que demuestra la vulnerabilidad de Doble Liberación CVE-2026-23918 en Apache HTTP Server 2.4.66 modhttp2. La vulnerabilidad se origina en una condición de carrera durante el procesamiento temprano de tramas RSTSTREAM. Me...

CVE-2026-23918-poc

CVE-2026-23918 — Apache modhttp2 Double Free Affected: Apache HTTP Server 2.4.66 with modhttp2 + Event MPM Fixed in: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 HIGH — Unauthenticated Remote Code Execution possible CWE: CWE-415 Double Free What's the vulnerability modhttp2 in Apache 2.4.66 has a...

http2-bomb

HTTP/2 炸弹 - CVE-2026-49975 一个针对 HTTP/2 服务器的拒绝服务（DoS）概念验证。通过将 HPACK 放大与流保持相结合，一台拥有普通网络连接的机器即可在数秒内使存在漏洞的服务器不可用。 漏洞 CVE： CVE-2026-49975 标题： Apache HTTP Server：modhttp2 拒绝服务 官方描述： Apache HTTP Server 的 modhttp2 模块中存在一个过大内存分配漏洞（CWE-789），允许通过特制的 HTTP 请求发起拒绝服务攻击。 受影响版本： Apache HTTP Server 2.4.17 至 2.4.67...

MiracleLinux 9 : mod_http2-2.0.26-6.el9_8.2 (AXSA:2026-1693:03)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1693:03 advisory. httpd: modhttp2: Apache HTTP Server modhttp2: Use After Free vulnerability allows arbitrary code execution or denial of service. CVE-2026-48913 http...

RLSA-2026:59387 Moderate: mod_http2 security, bug fix, and enhancement update

The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers. Security Fixes: httpd: modhttp2: Apache HTTP Server modhttp2: Use After Free vulnerability allows arbitrary code execution or denial of service. CVE-2026-48913 httpd: Apache HTTP Server:...

mod_http2 security, bug fix, and enhancement update

An update is available for modhttp2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of...

RHSA-2026:59387 Red Hat Security Advisory: mod_http2 security, bug fix, and enhancement update

Bulletin has no description...

AlmaLinux 9 : mod_http2 (ALSA-2026:59387)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:59387 advisory. httpd: modhttp2: Apache HTTP Server modhttp2: Use After Free vulnerability allows arbitrary code execution or denial of service. CVE-2026-48913 httpd:...

RockyLinux 9 : mod_http2 (RLSA-2026:59387)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59387 advisory. httpd: modhttp2: Apache HTTP Server modhttp2: Use After Free vulnerability allows arbitrary code execution or denial of service. CVE-2026-48913 httpd:...

Oracle Linux 9 : mod_http2 (ELSA-2026-59387)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-59387 advisory. 2.0.26-6.2 - Resolves: RHEL-190583 - address CVE-2026-43951 and CVE-2026-48913 in modhttp2 Tenable has extracted the preceding description block...

httpd: mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of service.

A flaw was found in the Apache HTTP Server's modhttp2 module. This vulnerability, known as a Use After Free, occurs when the server's file handles are exhausted. An attacker could potentially exploit this to cause a denial of service or, in some cases, execute arbitrary code, leading to system...

Moderate: Red Hat Security Advisory: mod_http2 security, bug fix, and enhancement update

An update for modhttp2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

mod_http2 security, bug fix, and enhancement update

2.0.26-6.2 - Resolves: RHEL-190583 - address CVE-2026-43951 and CVE-2026-48913 in modhttp2...

RHEL 9 : mod_http2 (RHSA-2026:59387)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:59387 advisory. The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers. Security Fixes: httpd:...