Ubuntu warns of Apache HTTP Server DoS and cookie leak
Original title: USN-9016-1: Apache HTTP Server vulnerabilities
CVE-2026-46729 affects Ubuntu 14.04 LTS through 26.04 LTS; the snippet states no fixed versions.
Ubuntu security notice USN-9016-1 covers Apache HTTP Server flaws. Incorrect memory handling could let an attacker cause a denial of service on Ubuntu 14.04 LTS through 26.04 LTS (CVE-2026-46729). A separate session-cookie handling issue could let a remote attacker leak sensitive information on several of those releases. The feed text is cut off before fixes.
Unconfirmed: The snippet is truncated, so the second issue’s full scope, CVE id and fixes are not shown.
- Named discoverers include Zhang San, Ankit Prateek, Zhen Kong and others.
- CVE-2026-46729 is limited to the listed Ubuntu LTS releases.
- The cookie issue affects Ubuntu 14.04, 16.04, 18.04 and 20.04 LTS, with the list cut off.
- No exploitation or fixed package versions appear in the snippet.
Impact: denial of service or leakage of sensitive information
| Product | Affected |
|---|---|
| Apache HTTP Server | Ubuntu 14.04 LTS through 26.04 LTS for CVE-2026-46729 |
- 1.Apply the Ubuntu updates referenced in USN-9016-1.
- CVEs
- CVE-2026-46729
- Vendors
- Apache
- Products
- Apache HTTP Server
- Organizations
- Ubuntu
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-46729 | NULL pointer dereference DoS in Apache HTTP Server mod_heartmonitor | 7.5 | — |
From the original article
Zhang San, Ankit Prateek, Zhen Kong, SeungHyun Cho, Ryoma Nishioka, Keita Sode and Hyojae Lee discovered that Apache HTTP Server did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.