CVE-2026-29167

Опубликовано: 08 июн. 2026

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.

Ссылки

https://httpd.apache.org/security/vulnerabilities_24.html
Vendor Advisory
http://www.openwall.com/lists/oss-security/2026/06/08/4
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2026/06/09/1
Mailing List

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Версия от 2.4.0 (включая) до 2.4.68 (исключая)

EPSS

Процентиль: 51%

0.00688

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2026-29167

CVSS3: 9.8

ubuntu

3 месяца назад

Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

CVE-2026-29167

CVSS3: 4.6

redhat

3 месяца назад

CVE-2026-29167

msrc

3 месяца назад

Apache HTTP Server: mod_ldap per-dir use-after-free

CVE-2026-29167

CVSS3: 9.8

debian

3 месяца назад

Use After Free vulnerability in Apache HTTP Server with mod_ldap in pe ...

RLSA-2026:64794

rocky

8 дней назад

Low: httpd:2.4 security update

EPSS

Процентиль: 51%

0.00688

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416