CVE-2026-49975

Katalog CVE

CVSS 7.5 · High EPSS 4,2%

Kerentanan Memory Allocation with Excessive Size Value pada apache http server, debian linux. Skor CVSS 3.1 7.5 (High) menurut CISA ADP.

Deskripsi (NVD)

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

Rincian

Terbit di NVD

8 Juni 2026

Terakhir diubah

19 Agustus 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-789: Memory Allocation with Excessive Size Value
CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)

EPSS (30 hari)

4,2% peluang dieksploitasi; lebih tinggi dari 90,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://httpd.apache.org/security/vulnerabilities_24.html advisory vendor
• http://www.openwall.com/lists/oss-security/2026/06/03/3 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2026/06/08/16 mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2026/06/msg00009.html mailing list · advisory pihak ketiga
• https://github.com/EQSTLab/CVE-2026-49975 exploit · advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2026:25042
• https://access.redhat.com/errata/RHSA-2026:25057
• https://access.redhat.com/errata/RHSA-2026:25090
• https://access.redhat.com/errata/RHSA-2026:25225
• https://access.redhat.com/errata/RHSA-2026:27114
• https://access.redhat.com/errata/RHSA-2026:27200
• https://access.redhat.com/errata/RHSA-2026:27201
• https://access.redhat.com/errata/RHSA-2026:36373
• https://access.redhat.com/errata/RHSA-2026:36831
• https://access.redhat.com/errata/RHSA-2026:36846
• https://access.redhat.com/errata/RHSA-2026:50538
• https://access.redhat.com/errata/RHSA-2026:50572
• https://access.redhat.com/errata/RHSA-2026:55930
• https://access.redhat.com/errata/RHSA-2026:55992
• https://access.redhat.com/security/cve/CVE-2026-49975
• https://bugzilla.redhat.com/show_bug.cgi?id=2485371
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-49975.json