Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-23918

Опубликовано: 04 мая 2026
Источник: ubuntu
Приоритет: high
EPSS Средний
CVSS3: 8.8

Описание

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

РелизСтатусПримечание
devel

not-affected

2.4.68-1ubuntu4
esm-infra-legacy/trusty

not-affected

see notes
esm-infra-legacy/xenial

not-affected

see notes
esm-infra/bionic

not-affected

see notes
esm-infra/focal

not-affected

see notes
esm-infra/xenial

not-affected

see notes
jammy

not-affected

see notes
noble

not-affected

see notes
questing

not-affected

see notes
resolute

released

2.4.66-2ubuntu2.1

Показывать по

EPSS

Процентиль: 99%
0.49727
Средний

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
redhat
6 месяцев назад

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

CVSS3: 8.8
nvd
6 месяцев назад

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

CVSS3: 8.8
msrc
6 месяцев назад

Apache HTTP Server: http2: double free and possible RCE on early reset

CVSS3: 8.8
debian
6 месяцев назад

Double Free and possible RCE vulnerability in Apache HTTP Server with ...

CVSS3: 8.8
github
6 месяцев назад

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

EPSS

Процентиль: 99%
0.49727
Средний

8.8 High

CVSS3