Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:25090

Опубликовано: 11 июн. 2026
Источник: rocky
Оценка: Important

Описание

Important: httpd:2.4 security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

  • httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
mod_mdx86_648.module+el8.10.0+40053+5a18018e.2mod_md-2.0.8-8.module+el8.10.0+40053+5a18018e.2.x86_64.rpm
httpdx86_6465.module+el8.10.0+40206+be2c8a50.8httpd-2.4.37-65.module+el8.10.0+40206+be2c8a50.8.x86_64.rpm
httpd-develx86_6465.module+el8.10.0+40206+be2c8a50.8httpd-devel-2.4.37-65.module+el8.10.0+40206+be2c8a50.8.x86_64.rpm
httpd-filesystemnoarch65.module+el8.10.0+40206+be2c8a50.8httpd-filesystem-2.4.37-65.module+el8.10.0+40206+be2c8a50.8.noarch.rpm
httpd-manualnoarch65.module+el8.10.0+40206+be2c8a50.8httpd-manual-2.4.37-65.module+el8.10.0+40206+be2c8a50.8.noarch.rpm
httpd-toolsx86_6465.module+el8.10.0+40206+be2c8a50.8httpd-tools-2.4.37-65.module+el8.10.0+40206+be2c8a50.8.x86_64.rpm
mod_http2x86_6410.module+el8.10.0+40204+716978aa.6mod_http2-1.15.7-10.module+el8.10.0+40204+716978aa.6.x86_64.rpm
mod_ldapx86_6465.module+el8.10.0+40206+be2c8a50.8mod_ldap-2.4.37-65.module+el8.10.0+40206+be2c8a50.8.x86_64.rpm
mod_proxy_htmlx86_6465.module+el8.10.0+40206+be2c8a50.8mod_proxy_html-2.4.37-65.module+el8.10.0+40206+be2c8a50.8.x86_64.rpm
mod_sessionx86_6465.module+el8.10.0+40206+be2c8a50.8mod_session-2.4.37-65.module+el8.10.0+40206+be2c8a50.8.x86_64.rpm

Показывать по

Связанные CVE

CVE-2026-49975

Ссылки на источники

Исправления

Связанные уязвимости

ubuntu логотип

CVE-2026-49975

CVSS3: 7.5
ubuntu
около 2 месяцев назад

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

redhat логотип

CVE-2026-49975

CVSS3: 7.5
redhat
около 2 месяцев назад

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

nvd логотип

CVE-2026-49975

CVSS3: 7.5
nvd
около 2 месяцев назад

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

msrc логотип

CVE-2026-49975

CVSS3: 7.5
msrc
около 2 месяцев назад

Apache HTTP Server: mod_http2 denial of service

debian логотип

CVE-2026-49975

CVSS3: 7.5
debian
около 2 месяцев назад

Memory Allocation with Excessive Size Value vulnerability in Apache HT ...