PT-2025-29120 · Apache+8 · Apache Http Server+8

Gal Bar Nahum · Publicado 2025-07-10 · Atualizado 2026-06-08 · CVE-2025-53020

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Nome do Software Vulnerável e Versões Afetadas: Apache HTTP Server versões 2.4.17 até 2.4.63

Descrição: Existe um problema de liberação tardia de memória após o tempo de vida efetivo no Apache HTTP Server.

Recomendações: Atualize para a versão 2.4.64.

Correção

DoS

Memory Leak

Enumeração de Fraquezas

CWE-401

Identificadores relacionados

ALSA-2026:22140

ALSA-2026:22528

ALSA-2026:22551

ALT-PU-2025-9538

ALT-PU-2025-9924

AZL-65094

AZL-65109

BDU:2025-08955

BIT-APACHE-2025-53020

CVE-2025-53020

DLA-4270-1

MGASA-2025-0301

OPENSUSE-SU-2025:15360-1

OPENSUSE-SU-2026:20810-1

RHSA-2026:22140

RHSA-2026:22528

RHSA-2026:22551

SUSE-SU-2025:02565-1

SUSE-SU-2025:02682-1

SUSE-SU-2025:02683-1

SUSE-SU-2025:02684-1

SUSE-SU-2025:02685-1

SUSE-SU-2025_02565-1

SUSE-SU-2025_02682-1

SUSE-SU-2025_02683-1

SUSE-SU-2025_02684-1

SUSE-SU-2025_02685-1

SUSE-SU-2026:21846-1

USN-7639-1

USN-7639-2

Produtos afetados

Alt Linux

Apache Http Server

Astra Linux

Debian

Linuxmint

Red Os

Rocky Linux

Suse

Ubuntu

Referências · 118

• https://bugzilla.suse.com/1246169 · Nota
• https://launchpad.net/bugs/2119395 · Nota
• https://bugzilla.redhat.com/2379343 · Nota
• https://bugzilla.suse.com/1246305 · Nota
• https://bugzilla.suse.com/1246302 · Nota
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2025-53020 · Aviso do Fabricante
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-1113SE18 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2025:02684-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-53020 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2024-47252 · Nota
• http://openwall.com/lists/oss-security/2025/07/10/10 · Nota
• https://httpd.apache.org/security/vulnerabilities_24.html · Aviso do Fabricante
• https://bugzilla.suse.com/1246307 · Nota
• https://access.redhat.com/errata/RHSA-2026:22528 · Nota
• https://openwall.com/lists/oss-security/2025/07/10/7 · Nota