Tag

#apache

1 article tagged with #apache.

Filter By:All Posts apache architecture aws buffer-overflow cloud-security compliance cve devsecops http2 kev memory-safety network-security palo-alto pan-os policy-as-code rce serverless web-server zero-trust

VULNERABILITY•MAY 14, 2026

CVE-2026-23918: Tearing Down the Apache mod_http2 Early-Reset Double-Free

A race between HTTP/2 HEADERS and RST_STREAM frames lets unauthenticated clients double-free a stream pool inside mod_http2's h2_mplx.c. We dissect the bug, the patch in 2.4.67, and what defenders should actually do.

#apache #http2 #rce

12 MIN READ