A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to version 2.4.69, which fixes this issue

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 apache2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 apache2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.69-1~deb13u1"}]}]

Debian:14 apache2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.69-1"}]}]

参照URL

advisory security-tracker.debian.org