CVE-2026-49975
🟡 Monitoruj
Przepełnienie pamięci w mod_http Apache HTTP Server prowadzi do odmowy usługi przez złośliwe żądania HTTP.
CVSS
7.5
EPSS
28.0%
Exploit
poc
Vendor
apache
Opis źródłowy (NVD)
Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.
dos exploit
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 7.5 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 28.0% |
| Opublikowano (NVD) | 2026-06-08 16:16:44 UTC |
| Ostatnia modyfikacja (NVD) | 2026-08-19 12:18:28 UTC |
Referencje
- https://httpd.apache.org/security/vulnerabilities_24.html (security@apache.org) [Vendor Advisory]
- http://www.openwall.com/lists/oss-security/2026/06/03/3 (af854a3a-2127-422b-91ae-364da2661108) [Mailing List, Third Party Advisory]
- http://www.openwall.com/lists/oss-security/2026/06/08/16 (af854a3a-2127-422b-91ae-364da2661108) [Mailing List, Third Party Advisory]
- https://lists.debian.org/debian-lts-announce/2026/06/msg00009.html (af854a3a-2127-422b-91ae-364da2661108) [Mailing List, Third Party Advisory]
- https://access.redhat.com/errata/RHSA-2026:25042 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:25057 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:25090 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:25225 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:27114 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:27200 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:27201 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:36373 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:36831 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:36846 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:50538 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:50572 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:55930 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:55992 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/security/cve/CVE-2026-49975 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://bugzilla.redhat.com/show_bug.cgi?id=2485371 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://github.com/EQSTLab/CVE-2026-49975 (134c704f-9b21-4f2e-91b3-4a467353bcc0) [Exploit, Third Party Advisory]
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-49975.json (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)