Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted.
This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade apache2 | Jul 7, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade mod_http2Upgrade mod_http2-debuginfoUpgrade mod_http2-debugsource | Jun 23, 2026 | Jun 8, 2026 |
| Apache Httpd | — | Upgrade to the latest version of Apache HTTPD | Jun 9, 2026 | Jun 8, 2026 |
| Debian | — | Upgrade apache2 | Jun 16, 2026 | Jun 16, 2026 |
| Freebsd | — | Upgrade apache24 | Jun 15, 2026 | Jun 8, 2026 |
| Gentoo Linux | — | Upgrade www-servers/apache. | Aug 16, 2026 | Aug 13, 2026 |
| Redhat_linux | — | No solution existsUpgrade mod_http2-debugsourceUpgrade mod_http2-debuginfoUpgrade mod_http2 | Jul 3, 2026 | Jun 8, 2026 |
| Rocky_linux | — | Upgrade mod_http2Upgrade mod_http2-debuginfoUpgrade mod_http2-debugsource | Jul 10, 2026 | Jul 7, 2026 |
| Ubuntu | — | Upgrade apache2-suexec-pristine (Ubuntu Pro)Upgrade libapache2-mod-md (Ubuntu Pro)Upgrade apache2-ssl-dev (Ubuntu Pro)Upgrade apache2Upgrade apache2-suexec-custom (Ubuntu Pro)Upgrade apache2-utils (Ubuntu Pro)Upgrade apache2-bin (Ubuntu Pro)Upgrade libapache2-mod-proxy-uwsgi (Ubuntu Pro)Upgrade apache2-dev (Ubuntu Pro)Upgrade apache2 (Ubuntu Pro) | Jul 9, 2026 | Jul 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 17, 2026 | Jun 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub