mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals

An integer overflow flaw has been discovered in the Apache HTTP server. The integer overflow in the case of failed ACME certificate renewal leads, after a number of failures 30 days in default configurations, to the backoff timer becoming 0. Attempts to renew the certificate then are repeated...

CVE-2025-55753

An integer overflow in the mod_md (ACME) component of the Apache HTTP Server (versions 2.4.30 to 2.4.65) causes the backoff timer to reset to 0 after repeated failed ACME certificate renewals (typically after ~30 days). This leads to immediate, repeated renewal attempts without delays. To mitigat...