Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gr5c-77fq-wx32

Опубликовано: 01 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0.

Users are recommended to upgrade to version 2.4.69, which fixes this issue.

Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0.

Users are recommended to upgrade to version 2.4.69, which fixes this issue.

EPSS

Процентиль: 41%
0.00484
Низкий

7.3 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 7.3
ubuntu
25 дней назад

Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0. Users are recommended to upgrade to version 2.4.69, which fixes this issue.

CVSS3: 5.6
redhat
25 дней назад

Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0. Users are recommended to upgrade to version 2.4.69, which fixes this issue.

CVSS3: 7.3
nvd
25 дней назад

Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0. Users are recommended to upgrade to version 2.4.69, which fixes this issue.

CVSS3: 7.3
msrc
18 дней назад

Apache HTTP Server: mod_auth_digest DoS attack

CVSS3: 7.3
debian
25 дней назад

Use after free in mod_auth_digest in Apache Software Foundation Apache ...

EPSS

Процентиль: 41%
0.00484
Низкий

7.3 High

CVSS3

Дефекты

CWE-416