Logo
›
›vulnerability›CVE-2026-49975
Name
CVE-2026-49975
Source
NVD ( link)Debian ( link)
Description
Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.
CWEs
CWE-789
Published Date
Updated Date
Workaround
-
Advisories
https://httpd.apache.org/security/vulnerabilities_24.htmlVendor Advisory
http://www.openwall.com/lists/oss-security/2026/06/03/3Mailing List
http://www.openwall.com/lists/oss-security/2026/06/08/16Mailing List
https://lists.debian.org/debian-lts-announce/2026/06/msg00009.htmlMailing List

Analysis#

Affected Component
Analysis
apache2
Exploitable
nginx
Exploitable
nginx
Exploitable

Vulnerability Ratings#

7.5
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
apache
buildroot
2025.02.x
2.4.68
Not Affected
nginx
buildroot
2025.02.x
1.30.2
Not Affected
apache
buildroot
master
2.4.68
Not Affected
nginx
buildroot
master
1.30.2
Not Affected
apache
openwrt
master
2.4.65-r1
Exploitable
apache
openwrt
openwrt-25.12
2.4.65-r1
Exploitable
apache2
yocto
kirkstone
2.4.66
Exploitable
nginx
yocto
kirkstone
1.20.1
Exploitable
apache2
yocto
master
2.4.67
Exploitable
nginx
yocto
master
1.30.2
Not Affected