CVE-2026-56154

Опубликовано: 01 окт. 2026

Источник: debian

Описание

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
apache2	fixed	2.4.69-1		package

Примечания

https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-56154
Fixed by: https://github.com/apache/httpd/commit/6e4d1e614597109909dda495d235b6a1331d7beb

Связанные уязвимости

CVE-2026-56154

CVSS3: 9.8

ubuntu

25 дней назад

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVE-2026-56154

CVSS3: 8.1

redhat

25 дней назад

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVE-2026-56154

CVSS3: 9.8

nvd

25 дней назад

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVE-2026-56154

CVSS3: 9.8

msrc

18 дней назад

Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}

GHSA-f5cw-5j88-wxxc

CVSS3: 9.8

github

25 дней назад

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.