CVE-2026-42528

Apache HTTP Server: mod_dav shared lock overflow

medium · 4.3

Published Oct 1, 2026, 15:52 UTC

Description

A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.