USN-8571-2: Apache HTTP Server regression
Ubuntu issues USN-8571-2 fixing an Apache HTTP Server regression that prevented startup when HTTP/2 proxying was enabled.
28
CVE-2026-33007
- CVSS 3.1
- 5.3 medium
- EPSS
- <1%p42
- Published
- ·
- Modified
Description · NVD
A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration. Users are recommended to upgrade to version 2.4.67, which fixes this issue.