Apache HTTP Server の告知 20 件（2026-10-01）
全部で 20 件、最大深刻度 moderate。AI Apache HTTP Server 2.4.xの複数のモジュールに脆弱性が存在する。バッファオーバーフロー、use-after-free、サービス妨害、情報漏洩など様々な脆弱性が報告されており、2.4.69への更新で修正される。
修正版 2.4.69
| 告知 | 公開日 | 重大度 | CVE |
|---|---|---|---|
| mod_dav_fs namespace overflow CVE-2026-93546 | 2026-10-01 | moderate | CVE-2026-93546 |
| mod_userdir information disclosure CVE-2026-79768 | 2026-10-01 | low | CVE-2026-79768 |
| mod_auth_digest DoS attack CVE-2026-73637 | 2026-10-01 | low | CVE-2026-73637 |
| mod_auth_digest one-time-nonce replay attack CVE-2026-73636 | 2026-10-01 | low | CVE-2026-73636 |
| mod_proxy_uwsgi Transfer-Encoding response smuggling CVE-2026-63718 | 2026-10-01 | low | CVE-2026-63718 |
| mod_xml2enc crash on charset conversion failure CVE-2026-63686 | 2026-10-01 | low | CVE-2026-63686 |
| mod_vhost_alias stack overflow CVE-2026-63292 | 2026-10-01 | moderate | CVE-2026-63292 |
| mod_proxy_ftp PASV address handling CVE-2026-63045 | 2026-10-01 | low | CVE-2026-63045 |
| mod_ssl SSLRequire allows .htaccess ap_expr file-function CVE-2026-59797 | 2026-10-01 | low | CVE-2026-59797 |
| Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM CVE-2026-59685 | 2026-10-01 | moderate | CVE-2026-59685 |
| mod_dav_fs property database read access CVE-2026-58415 | 2026-10-01 | low | CVE-2026-58415 |
| Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy CVE-2026-57941 | 2026-10-01 | moderate | CVE-2026-57941 |
| mod_proxy_html: crash in dump_content CVE-2026-56449 | 2026-10-01 | low | CVE-2026-56449 |
| mod_rewrite use-after-free via %{LA-U:HTTP:...} CVE-2026-56154 | 2026-10-01 | low | CVE-2026-56154 |
| mod_charset_lite: Heap overflow in finish_partial_char CVE-2026-56153 | 2026-10-01 | low | CVE-2026-56153 |
| mod_auth_digest reauthentication attack CVE-2026-48005 | 2026-10-01 | low | CVE-2026-48005 |
| mod_session: Session cookie not removed during internal redirect CVE-2026-47360 | 2026-10-01 | low | CVE-2026-47360 |
| mod_heartmonitor denial of service CVE-2026-46729 | 2026-10-01 | low | CVE-2026-46729 |
| mod_dav shared lock overflow CVE-2026-42528 | 2026-10-01 | moderate | CVE-2026-42528 |
| limited RCE for some internal redirects to non-CGI files in CGI directories CVE-2026-42356 | 2026-10-01 | low | CVE-2026-42356 |
こちらで見つけた日
まだ来ていない日付