Description
Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Apache Software Foundation Apache HTTP Server
Default version status: unaffected
2.4.17 to ≤ 2.4.67affected
References
- https://httpd.apache.org/security/vulnerabilities_24.html ↗
- http://www.openwall.com/lists/oss-security/2026/06/03/3 ↗
- https://lists.debian.org/debian-lts-announce/2026/06/msg00009.html ↗
- http://www.openwall.com/lists/oss-security/2026/06/08/16 ↗
- https://github.com/EQSTLab/CVE-2026-49975 ↗
- https://access.redhat.com/security/cve/CVE-2026-49975 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2485371 ↗
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-49975.json ↗
- https://access.redhat.com/errata/RHSA-2026:27200 ↗
- https://access.redhat.com/errata/RHSA-2026:50538 ↗
- https://access.redhat.com/errata/RHSA-2026:25225 ↗
- https://access.redhat.com/errata/RHSA-2026:25090 ↗
- https://access.redhat.com/errata/RHSA-2026:36846 ↗
- https://access.redhat.com/errata/RHSA-2026:36831 ↗
- https://access.redhat.com/errata/RHSA-2026:36373 ↗
- https://access.redhat.com/errata/RHSA-2026:55930 ↗
- https://access.redhat.com/errata/RHSA-2026:55992 ↗
- https://access.redhat.com/errata/RHSA-2026:50572 ↗
- https://access.redhat.com/errata/RHSA-2026:25057 ↗
- https://access.redhat.com/errata/RHSA-2026:25042 ↗
- https://access.redhat.com/errata/RHSA-2026:27201 ↗
- https://access.redhat.com/errata/RHSA-2026:27114 ↗