CVE-2026-23918

CVE-2026-23918 Apache httpd modhttp2 스트림 정리 과정에서의 이중 해제Double-free로 인한 사전 인증 원격 코드 실행RCE 취약점. 영향: modhttp2 및 멀티스레드 MPMevent/worker을 사용하는 httpd 2.4.66. 수정 버전: 2.4.67. 발견 및 보고: Bartlomiej Dmitruk striga.ai, Stanislaw Strzalkowski isec.pl. 상세 설명:...

Detections-CVE-2026-23918

이동 예정: https://github.com/insomnisec/publiccvedetections 탐지 게시물의 장기적인 관리를 위해 이 저장소는 2026년 6월에 제거됩니다 앞으로는 다른 저장소를 사용해 주세요 CVE-2026-23918 "Apache HTTP/2 Double-Free" — 탐지 및 대응 패키지 게시일: 2026-05-04 CVSSv3: 8.8 높음 유형: 원격 코드 실행 / 서비스 거부 Double-Free 메모리 손상 구성 요소: Apache HTTP Server modhttp2 h2mplx.c 스트림...

unbound: Unbound: Denial of Service via use-after-free in DoH stream cleanup

A use-after-free vulnerability in Unbound's DNS-over-HTTPS DoH stream cleanup code allows a remote attacker to cause a denial of service DoS. When DoH support is compiled, sending a specially crafted DoH connection under specific failure conditions—such as an RPZ drop query or heavy traffic—cause...

CVE-2026-82720

A use-after-free vulnerability in Unbound's DNS-over-HTTPS DoH stream cleanup code allows a remote attacker to cause a denial of service DoS. When DoH support is compiled, sending a specially crafted DoH connection under specific failure conditions—such as an RPZ drop query or heavy traffic—cause...

CVE-2026-82720 Use-after-free in DoH stream cleanup code path

NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. During failure code paths i.e., RPZ drop query, jostle due to heavy traffic, a dropped DoH stream brings down the whole DoH session and does n...

CVE-2026-18924 HTTP/2 server push UAF

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

CVE-2026-18549

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying stream is still open. If the client then aborts t...

libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service

A flaw was found in libcurl. This use-after-free vulnerability occurs when an application configures an HTTP/2 stream-dependency tree and then performs a sequence of operations involving curleasyreset and curleasycleanup. During the final cleanup, libcurl attempts to access memory that has alread...

Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service

Exploit Title: Apache HTTP Server 2.4.66 - 'modhttp2' Double-Free Denial of Service Google Dork: intext:"Apache/2.4.66" "HTTP/2" Date: 2026-05-06 Exploit Author: xeloxa https://github.com/xeloxa/ Vendor Homepage: https://httpd.apache.org/ Software Link:...

Exploit for Double Free in Apache Http_Server

CVE-2026-23918 "Apache HTTP/2 Double-Free" — Detection & Respo...

CVE-2026-31599 media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtvchannelpmtmatchsections syzbot reported a general protection fault in vidtvpsidescassign 1. vidtvpsipmtstreaminit can return NULL on memory allocation failure, but...

CVE-2025-68262

In the Linux kernel, the following vulnerability has been resolved: crypto: zstd - fix double-free in per-CPU stream cleanup The crypto/zstd module has a double-free bug that occurs when multiple tfms are allocated and freed. The issue happens because zstdstreams per-CPU contexts are freed in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a double release per CPU stream cleanup in crypto:zstd...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the imx8-isi driver not properly handling stream cleanup, which could lead to a resource leak...

Fedora 30 : mod_http2 (2019-63ba15cc83) (0-Length Headers Leak) (Data Dribble) (Internal Data Buffering)

Rebuilt with newer nghttp2 ---- This update includes the latest upstream release of modhttp2, version 1.15.3. Upstream changes include : - fixes Timeout vs. KeepAliveTimeout behaviour, see PR 63534. - Fixes stream cleanup when connection throttling is in place. - Counts stream resets by client on...

Ubuntu 6.06 LTS / 6.10 / 7.04 : libvorbis vulnerabilities (USN-498-1)

David Thiel discovered that libvorbis did not correctly verify the size of certain headers, and did not correctly clean up a broken stream. If a user were tricked into processing a specially crafted Vorbis stream, a remote attacker could execute arbitrary code with the user's privileges. Note tha...

USN-498-1: libvorbis vulnerabilities

David Thiel discovered that libvorbis did not correctly verify the size of certain headers, and did not correctly clean up a broken stream. If a user were tricked into processing a specially crafted Vorbis stream, a remote attacker could execute arbitrary code with the user's privileges...