CVE-2026-48913

Опубликовано: 08 июн. 2026

Источник: nvd

CVSS3: 7.3

EPSS Низкий

Описание

Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted.

This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.

Ссылки

https://httpd.apache.org/security/vulnerabilities_24.html
Vendor Advisory
http://www.openwall.com/lists/oss-security/2026/06/08/15
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Версия от 2.4.55 (включая) до 2.4.68 (исключая)

EPSS

Процентиль: 38%

0.00479

Низкий

7.3 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2026-48913

CVSS3: 7.3

ubuntu

около 2 месяцев назад

Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.

CVE-2026-48913

CVSS3: 7.3

redhat

около 2 месяцев назад

Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.

CVE-2026-48913

msrc

около 2 месяцев назад

Apache HTTP Server: mod_http2 memory corruption when file handles exhausted

CVE-2026-48913

CVSS3: 7.3

debian

около 2 месяцев назад

Use After Free vulnerability in Apache HTTP Server module mod_http2 wh ...

GHSA-fjj2-vrp3-84fv

CVSS3: 7.3

github

около 2 месяцев назад

Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.

EPSS

Процентиль: 38%

0.00479

Низкий

7.3 High

CVSS3

Дефекты

CWE-416