CVEvulnerability

CVE-2026-42528

4.3 MEDIUM Published 2026-10-01 Modified 2026-10-06 Official page ↗
Status
Analyzed
Published
2026-10-01
Last modified
2026-10-06
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-789

Description

A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue

Affected configurations

• apache http server (>= 2.4.0 < 2.4.69)

Related

Weakness · CWE (1)

  • CWE-789 Memory Allocation with Excessive Size Value weakness

References