Apache HTTP Server
Moderate fix1 remedy
cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 2.4.55, <= 2.4.67
Apache HTTP Server mod_http2 Use-After-Free Vulnerability Exhausting File Handles
Vulnerability
Patched
A use-after-free vulnerability has been identified in the Apache HTTP Server module mod_http2. This vulnerability occurs when file handles are exhausted, leading to memory corruption. It affects Apache HTTP Server versions 2.4.55 prior to 2.4.67.
Impact
Exploitation of this vulnerability can lead to memory corruption, causing unpredictable behavior in the server process.
Remediation
Users are advised to upgrade to Apache HTTP Server version 2.4.68, which addresses this vulnerability.
Added: Jun 8, 2026, 4:28 PM
Updated: Jun 8, 2026, 4:28 PM
Vulnerability Rating
Custom Algorithm
spread
9.4impact
1.3exploitability
7.2remediation
7.7relevance
9.4threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.