CVE-2026-46729

Меры по смягчению последствий

Disable the mod_heartmonitor module or restrict network access to the monitoring port:

1. Disable the module: Comment out the LoadModule directive for mod_heartmonitor in the Apache configuration (typically located in /etc/httpd/conf.modules.d/00-base.conf or a custom configuration file):

LoadModule heartmonitor_module modules/mod_heartmonitor.so

Then reload the web server configuration: systemctl reload httpd 2. Restrict network reachability: If mod_heartmonitor is required, configure firewall rules using firewalld to permit traffic to the HeartbeatListen unicast port only from authorized backend nodes: firewall-cmd --permanent --zone=trusted --add-source=<TRUSTED_IP_RANGE> firewall-cmd --reload Caveat: Disabling mod_heartmonitor prevents mod_lbmethod_heartbeat from receiving backend node status, which disables heartbeat-based dynamic load balancing. Warning: Modifying Apache configuration files requires reloading or restarting httpd, which may briefly interrupt active network connections.