← Retour à la recherche de CVE

CVE-2026-29167

Apache HTTP Server

Description

Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

CVSS 9.8EPSS 0.688%Risque 1.04
Voir la source
Publication
2026-06-08 16:16:37
Versions concernées
<2.4.68
Type
Package
Dernière modification
2026-07-23 07:10:00
Vecteur
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H