Security update for apache2

This update for apache2 fixes the following security issues: CVE-2026-106023: modmd NULL pointer dereference leads to child process crash bsc1290167. CVE-2026-109163: modvhostalias 1 byte stack buffer overwrite bsc1290169. CVE-2026-119618: modhttp2: heap corruption and RCE in assignheaders...

Security update for apache2

This update for apache2 fixes the following security issues: CVE-2026-106023: modmd NULL pointer dereference leads to child process crash bsc1290167. CVE-2026-109163: modvhostalias 1 byte stack buffer overwrite bsc1290169. CVE-2026-119618: modhttp2: heap corruption and RCE in assignheaders...

Security update for apache2

This update for apache2 fixes the following security issues: CVE-2026-106023: modmd NULL pointer dereference leads to child process crash bsc1290167. CVE-2026-109163: modvhostalias 1 byte stack buffer overwrite bsc1290169. CVE-2026-119618: modhttp2: heap corruption and RCE in assignheaders...

Security update for apache2

This update to apache2 version 2.4.71 fixes the following issues: Security issues fixed: CVE-2026-106023: modmd NULL pointer dereference leads to child process crash bsc1290167. CVE-2026-109163: modvhostalias 1 byte stack buffer overwrite bsc1290169. CVE-2026-119618: modhttp2: heap corruption and...

USN-9090-1 apache2 vulnerabilities

Zhenpeng Lin discovered that Apache HTTP Server's moddav module incorrectly calculated memory sizes when handling WebDAV locks. An attacker with permission to create WebDAV locks could possibly use this issue to cause Apache HTTP Server to crash, resulting in a denial of service. CVE-2026-42528 I...

USN-9090-1: Apache HTTP Server vulnerabilities

Zhenpeng Lin discovered that Apache HTTP Server's moddav module incorrectly calculated memory sizes when handling WebDAV locks. An attacker with permission to create WebDAV locks could possibly use this issue to cause Apache HTTP Server to crash, resulting in a denial of service. CVE-2026-42528 I...

UBUNTU-CVE-2026-106023

modmd NULL pointer dereference leads to child process crash...

CVE-2026-106023

modmd NULL pointer dereference leads to child process crash...

Critical: httpd

Issue Overview: modmd NULL pointer dereference leads to child process crash CVE-2026-106023 modvhostalias 1 byte stack buffer overwrite after CVE-2026-63292 CVE-2026-109163 Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in...

FreeBSD : Apache httpd -- Multiple vulnerabilities (f2904526-ddd3-11f1-8135-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f2904526-ddd3-11f1-8135-8447094a420f advisory. The Apache httpd project reports: CVE-2026-119618 critical: modhttp2: heap corruption and RCE ...

Amazon Linux 2 : httpd (ALAS-2026-4114)

The version of httpd installed on the remote host is prior to 2.4.71-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4114 advisory. modmd NULL pointer dereference leads to child process crash CVE-2026-106023 modvhostalias 1 byte stack buffer overwrite aft...

CVE-2026-106023

NULL pointer dereference vulnerability in Apache HTTP Server's modmd during HTTP request processing. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.69...

CVE-2026-106023

NULL pointer dereference vulnerability in Apache HTTP Server's modmd during HTTP request processing. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.69...

ALPINE-CVE-2026-106023

NULL pointer dereference vulnerability in Apache HTTP Server's modmd during HTTP request processing. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.69...

DEBIAN-CVE-2026-106023

NULL pointer dereference vulnerability in Apache HTTP Server's modmd during HTTP request processing. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.69...

EUVD-2026-123534

NULL pointer dereference vulnerability in Apache HTTP Server's modmd during HTTP request processing. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.69...

CVE-2026-106023

NULL pointer dereference vulnerability in Apache HTTP Server's modmd during HTTP request processing. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.69...

CVE-2026-106023

NULL pointer dereference vulnerability in Apache HTTP Server's modmd during HTTP request processing. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.69...

CVE-2026-106023

The Apache HTTP Server is vulnerable to a NULL pointer dereference within the mod_md module during HTTP request processing. This issue affects versions 2.4.30 through 2.4.69 . The underlying cause leads to a child process crash , which is classified as an important severity vulnerability. No spec...

CVE-2026-106023 Apache HTTP Server: mod_md NULL pointer dereference leads to child process crash

NULL pointer dereference vulnerability in Apache HTTP Server's modmd during HTTP request processing. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.69...