PT-2026-47313

CVE-2026-29167

·

Published

2026-03-02

·

Updated

2026-10-07

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.67
Description A Use After Free issue exists in Apache HTTP Server when using mod ldap in per-directory configuration. Use After Free occurs when an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.
Recommendations Upgrade to version 2.4.68.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-416: Use After Free
Related identifiers
CVE-2026-29167
BDU:2026-09758
ALSA-2026:59347
ALSA-2026:60004
ALSA-2026:64794
AZL-89732
BIT-APACHE-2026-29167
CLSA-2026-1781194173
CLSA-2026-1781209763
CLSA-2026-1781210149
CLSA-2026-1781261042
CLSA-2026-1781273712
CLSA-2026-1781352817
CLSA-2026-1781622427
CLSA-2026-1781627270
CLSA-2026-1781628808
CLSA-2026-1782141694
CLSA-2026-1782295363
CLSA-2026-1783698569
ECHO-7538-A6FB-09CA
OESA-2026-2744
OESA-2026-2745
OESA-2026-2746
OESA-2026-2747
OPENSUSE-SU-2026:21235-1
RHSA-2026:25042
RHSA-2026:59347
RHSA-2026:60004
RHSA-2026:64794
SUSE-SU-2026:22564-1
SUSE-SU-2026:2686-1
SUSE-SU-2026:2717-1
SUSE-SU-2026:2735-1
SUSE-SU-2026:2759-1
USN-8516-1
USN-8589-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com