Alpine/apache2: critical 9.8

In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow

Action: Upgrade apache2 to 2.4.48-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2021-26691#Alpine:v3.15/apache2
• https://security.alpinelinux.org/vuln/CVE-2021-26691

published 2021-06-10T07:15:07.580Z · modified 2026-10-23T17:17:56.163102946Z · JSON