Apache HTTP Server
Moderate fix1 remedy
cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 2.4.0, <= 2.4.67
Apache HTTP Server Out-of-Bounds Read Vulnerability in mod_headers and mod_mime
Vulnerability
Patched
An out-of-bounds read vulnerability has been identified in Apache HTTP Server versions 2.4.0 prior to 2.4.67. This vulnerability occurs in the 'merge_response_headers' function, where improper handling of multiple response languages can lead to memory access violations. The issue is present when both mod_headers and mod_mime are enabled, and can cause the server to crash.
Impact
Exploitation of this vulnerability leads to a memory access violation, causing the server to crash.
Remediation
Users are advised to upgrade to Apache HTTP Server version 2.4.68, which addresses this vulnerability.
Added: Jun 8, 2026, 5:12 PM
Updated: Jun 8, 2026, 5:12 PM
Vulnerability Rating
Custom Algorithm
spread
9.4impact
0.6exploitability
7.2remediation
7.7relevance
9.6threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.