Apache HTTP Server
Moderate fix1 remedy
cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 2.4.0, <= 2.4.67
Apache HTTP Server Buffer Underwrite Vulnerability via Crafted Regular Expressions
Vulnerability
Patched
A buffer underwrite vulnerability has been identified in Apache HTTP Server versions 2.4.0 prior to 2.4.67. This vulnerability arises in the core server when handling regular expressions in the configuration, allowing for potential memory manipulation.
Impact
Exploitation of this vulnerability leads to a buffer underwrite, where data is written before the allocated buffer, potentially causing memory corruption.
Remediation
Users are advised to upgrade to Apache HTTP Server version 2.4.68, which addresses this vulnerability.
Added: Jun 8, 2026, 5:02 PM
Updated: Jun 8, 2026, 5:02 PM
Vulnerability Rating
Custom Algorithm
spread
9.4impact
0.6exploitability
3.5remediation
7.7relevance
9.4threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.