Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-53020

Apache HTTP Server: HTTP/2 DoS by Memory Increase

Description

Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache HTTP Server

Default version status: unaffected

  • 2.4.17 to ≤ 2.4.63affected

References