PT-2026-46876 · Apache · Apache Http Server

Published 2026-06-04 · Updated 2026-06-04

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.58-1ubuntu8.13

Description Incorrect handling of certain cookie headers within the HTTP/2 implementation allows a remote attacker to cause excessive resource consumption, leading to a denial of service.

Recommendations Update to version 2.4.58-1ubuntu8.13.

Related Identifiers

USN-8384-1

Affected Products

Apache Http Server

References · 3

• https://osv.dev/vulnerability/USN-8384-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8384-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-49975 · Vendor Advisory