GHSA-f5cw-5j88-wxxc

Опубликовано: 01 окт. 2026

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...})

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...})

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Ссылки

EPSS

Процентиль: 46%

0.00562

Низкий

9.8 Critical

CVSS3

CVE ID

CVE-2026-56154

Дефекты

CWE-416

Связанные уязвимости

CVE-2026-56154

CVSS3: 9.8

ubuntu

25 дней назад

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVE-2026-56154

CVSS3: 8.1

redhat

25 дней назад

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVE-2026-56154

CVSS3: 9.8

nvd

25 дней назад

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

CVE-2026-56154

CVSS3: 9.8

msrc

18 дней назад

Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}

CVE-2026-56154

CVSS3: 9.8

debian

25 дней назад

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when ...

EPSS

Процентиль: 46%

0.00562

Низкий

9.8 Critical

CVSS3

CVE ID

CVE-2026-56154

Дефекты

CWE-416