PT-2026-103941
CVE-2026-73637
·
تاريخ النشر
2026-10-01
·
تاريخ التحديث
2026-11-04
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Apache HTTP Server versions prior to 2.4.69
Description
A use after free issue exists in the
mod auth digest module. This occurs when an unauthenticated remote client sends concurrent Digest authentication requests while AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0, leading to authentication state corruption. Use after free is a condition where a program continues to use a pointer after it has been freed, which can lead to crashes or unpredictable behavior.Recommendations
Upgrade to version 2.4.69.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾