ALPINE-CVE-2026-42528
ALPINE-CVE-2026-42528
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue
CVSS 4.3 · Medium · Fix available
- Published
- Updated
Stack: system
Affected products and versions
apache2 Alpine:v3.21
- Affected ranges
- ECOSYSTEM: < 2.4.69-r0
Update to 2.4.69-r0
apache2 Alpine:v3.22
- Affected ranges
- ECOSYSTEM: < 2.4.69-r0
Update to 2.4.69-r0
apache2 Alpine:v3.23
- Affected ranges
- ECOSYSTEM: < 2.4.69-r0
Update to 2.4.69-r0
apache2 Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 2.4.69-r0
Update to 2.4.69-r0