PT-2025-29120

CVE-2025-53020

·

Published

2025-07-10

·

Updated

2026-07-07

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.17 through 2.4.63
Description: A late release of memory after effective lifetime issue exists in Apache HTTP Server.
Recommendations: Upgrade to version 2.4.64.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-401: Missing Release of Memory after Effective Lifetime
Related identifiers
CVE-2025-53020
BDU:2025-08955
ALSA-2026:22140
ALSA-2026:22528
ALSA-2026:22551
ALT-PU-2025-9538
ALT-PU-2025-9924
AZL-65094
AZL-65109
BIT-APACHE-2025-53020
CLSA-2026-1781175625
CLSA-2026-1783416695
DLA-4270-1
MGASA-2025-0301
OPENSUSE-SU-2025:15360-1
OPENSUSE-SU-2026:20810-1
RHSA-2026:22140
RHSA-2026:22528
RHSA-2026:22551
RHSA-2026:27200
RHSA-2026:36373
RHSA-2026:36831
RHSA-2026:36846
RHSA-2026:50538
RHSA-2026:50572
RHSA-2026:55930
RHSA-2026:55992
SUSE-SU-2025:02565-1
SUSE-SU-2025_02565-1
SUSE-SU-2025:02682-1
SUSE-SU-2025_02682-1
SUSE-SU-2025:02683-1
SUSE-SU-2025_02683-1
SUSE-SU-2025:02684-1
SUSE-SU-2025_02684-1
SUSE-SU-2025:02685-1
SUSE-SU-2025_02685-1
SUSE-SU-2026:21846-1
SUSE-SU-2026:2686-1
USN-7639-1
USN-7639-2
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com