Medium
5.9
Stack-based buffer overflow vulnerability in Apache HTTP Server's mod_vhost_alias (after CVE-2026...
CVE-2026-109163
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Apache Software FoundationApache HTTP Server |
2.4.69 – 2.4.70→ Not listed |
Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Fix status by distribution
Records published by each distribution for this CVE. Fixed versions differ by release; check each link.
- Debian DEBIAN-CVE-2026-109163 apache2 No fixed version in this record
Original description The description as published by the source.
Stack-based buffer overflow vulnerability in Apache HTTP Server's mod_vhost_alias (after CVE-2026-63292)
This issue affects Apache HTTP Server: 2.4.69.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- REDHAT Red Hat
- web security@apache.org
- web nvd.nist.gov
- web github.com