CVE-2026-42528

Summary

A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes.

Users are recommended to upgrade to version 2.4.69, which fixes this issue

Affected Software

Weaknesses

• CWE-789: CWE-789 Memory Allocation with Excessive Size Value

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2026/10/01/12

References

• https://httpd.apache.org/security/vulnerabilities_24.html

• ←Previous
• Next→