USN-9090-1 apache2 vulnerabilities

Zhenpeng Lin discovered that Apache HTTP Server's moddav module incorrectly calculated memory sizes when handling WebDAV locks. An attacker with permission to create WebDAV locks could possibly use this issue to cause Apache HTTP Server to crash, resulting in a denial of service. CVE-2026-42528 I...

USN-9090-1: Apache HTTP Server vulnerabilities

Zhenpeng Lin discovered that Apache HTTP Server's moddav module incorrectly calculated memory sizes when handling WebDAV locks. An attacker with permission to create WebDAV locks could possibly use this issue to cause Apache HTTP Server to crash, resulting in a denial of service. CVE-2026-42528 I...

CVE-2026-63292

⚠️ CVE-2026-63292 — Apache HTTP Server Security Vulnerability 🔐 --- 🔎 Overview CVE-2026-63292 is a stack-based buffer overflow vulnerability affecting the Apache HTTP Server modvhostalias module. The issue can be triggered under specific server configurations involving oversized HTTP Host headers...

K000164214: Apache HTTP Server vulnerability CVE-2026-63292

Security Advisory Description Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 81...

SUSE CVE-2026-109163

Stack-based buffer overflow vulnerability in Apache HTTP Server's modvhostalias after CVE-2026-63292 This issue affects Apache HTTP Server: 2.4.69...

[slackware-security] httpd

New httpd packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/httpd-2.4.71-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues: Heap corruption and RCE in assignheaders...

CVE-2026-109163

modvhostalias 1 byte stack buffer overwrite after CVE-2026-63292...

Critical: httpd

Issue Overview: modmd NULL pointer dereference leads to child process crash CVE-2026-106023 modvhostalias 1 byte stack buffer overwrite after CVE-2026-63292 CVE-2026-109163 Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in...

Critical: httpd

Issue Overview: modvhostalias 1 byte stack buffer overwrite after CVE-2026-63292 CVE-2026-109163 Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server’s modhttp2 in assignheaders can lead to RCE. CVE-2026-119618 Affected Packages: httpd Issue...

UBUNTU-CVE-2026-109163

modvhostalias 1 byte stack buffer overwrite after CVE-2026-63292...

FreeBSD : Apache httpd -- Multiple vulnerabilities (f2904526-ddd3-11f1-8135-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f2904526-ddd3-11f1-8135-8447094a420f advisory. The Apache httpd project reports: CVE-2026-119618 critical: modhttp2: heap corruption and RCE ...

CVE-2026-109163

A flaw was found in Apache HTTP Server's modvhostalias module. A remote attacker could trigger a stack-based buffer overflow by sending a specially crafted HTTP request. This issue leads to a one-byte memory overwrite on the stack, which can crash the server process and result in a Denial of...

CVE-2026-109163

Stack-based buffer overflow vulnerability in Apache HTTP Server's modvhostalias after CVE-2026-63292 This issue affects Apache HTTP Server: 2.4.69...

DEBIAN-CVE-2026-109163

Stack-based buffer overflow vulnerability in Apache HTTP Server's modvhostalias after CVE-2026-63292 This issue affects Apache HTTP Server: 2.4.69...

CVE-2026-109163

Stack-based buffer overflow vulnerability in Apache HTTP Server's modvhostalias after CVE-2026-63292 This issue affects Apache HTTP Server: 2.4.69...

ALPINE-CVE-2026-109163

Stack-based buffer overflow vulnerability in Apache HTTP Server's modvhostalias after CVE-2026-63292 This issue affects Apache HTTP Server: 2.4.69...

EUVD-2026-123533

Stack-based buffer overflow vulnerability in Apache HTTP Server's modvhostalias after CVE-2026-63292 This issue affects Apache HTTP Server: 2.4.69...

CVE-2026-109163

Stack-based buffer overflow vulnerability in Apache HTTP Server's modvhostalias after CVE-2026-63292 This issue affects Apache HTTP Server: 2.4.69...

CVE-2026-109163

A stack-based buffer overflow exists in the mod_vhost_alias component of the Apache HTTP Server (specifically affecting version 2.4.69). This vulnerability involves a 1 byte stack buffer overwrite that occurs following the remediation of CVE-2026-63292. The severity is classified as low. No speci...

CVE-2026-109163 Apache HTTP Server: mod_vhost_alias 1 byte stack buffer overwrite (after CVE-2026-63292)

Stack-based buffer overflow vulnerability in Apache HTTP Server's modvhostalias after CVE-2026-63292 This issue affects Apache HTTP Server: 2.4.69...