PT-2026-47313 · Apache+4 · Apache Http Server+4

CVE-2026-29167

·

Published

2026-03-02

·

Updated

2026-08-26

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.67
Description A Use After Free issue exists in Apache HTTP Server when using mod ldap in per-directory configuration. Use After Free occurs when an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.
Recommendations Upgrade to version 2.4.68.

Fix

DoS

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2026:59347
ALSA-2026:60004
AZL-89732
BDU:2026-09758
BIT-APACHE-2026-29167
CVE-2026-29167
ECHO-7538-A6FB-09CA
OESA-2026-2744
OESA-2026-2745
OESA-2026-2746
OESA-2026-2747
OPENSUSE-SU-2026:21235-1
RHSA-2026:25042
RHSA-2026:59347
RHSA-2026:60004
SUSE-SU-2026:22564-1
SUSE-SU-2026:2686-1
SUSE-SU-2026:2717-1
SUSE-SU-2026:2735-1
SUSE-SU-2026:2759-1
USN-8516-1
USN-8589-1

Affected Products

Apache Http Server
Linuxmint
Red Os
Rocky Linux
Ubuntu