CVE-2026-73637
Fixed in a distro release EPSS <1%CVSS 7.3
Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0. Users are recommended to upgrade to version 2.4.69, which fixes this issue.
Products: Apache Software Foundation Apache HTTP Server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | httpd | 2.4.62-13.el9_8.9 |
| AlmaLinux 9 | httpd-core | 2.4.62-13.el9_8.9 |
| AlmaLinux 9 | httpd-devel | 2.4.62-13.el9_8.9 |
| AlmaLinux 9 | httpd-filesystem | 2.4.62-13.el9_8.9 |
| AlmaLinux 9 | httpd-manual | 2.4.62-13.el9_8.9 |
| AlmaLinux 9 | httpd-tools | 2.4.62-13.el9_8.9 |
| AlmaLinux 9 | mod_ldap | 2.4.62-13.el9_8.9 |
| AlmaLinux 9 | mod_lua | 2.4.62-13.el9_8.9 |
| AlmaLinux 9 | mod_proxy_html | 1:2.4.62-13.el9_8.9 |
| AlmaLinux 9 | mod_session | 2.4.62-13.el9_8.9 |
| AlmaLinux 9 | mod_ssl | 1:2.4.62-13.el9_8.9 |
| Alpine 3.21 | apache2 | 2.4.69-r0 |
| Alpine 3.22 | apache2 | 2.4.69-r0 |
| Alpine 3.23 | apache2 | 2.4.69-r0 |
| Alpine 3.24 | apache2 | 2.4.69-r0 |
| Amazon Linux 2 | httpd | 2.4.69-1.amzn2.0.3 |
| Amazon Linux 2 | httpd-devel | 2.4.69-1.amzn2.0.3 |
| Amazon Linux 2 | httpd-filesystem | 2.4.69-1.amzn2.0.3 |
| Amazon Linux 2 | httpd-manual | 2.4.69-1.amzn2.0.3 |
| Amazon Linux 2 | httpd-tools | 2.4.69-1.amzn2.0.3 |
| Amazon Linux 2 | mod_http2 | 1:2.4.69-1.amzn2.0.3 |
| Amazon Linux 2 | mod_ldap | 2.4.69-1.amzn2.0.3 |
| Amazon Linux 2 | mod_md | 2.4.69-1.amzn2.0.3 |
| Amazon Linux 2 | mod_proxy_html | 1:2.4.69-1.amzn2.0.3 |
| Amazon Linux 2 | mod_session | 2.4.69-1.amzn2.0.3 |
| Amazon Linux 2 | mod_ssl | 1:2.4.69-1.amzn2.0.3 |
| Amazon Linux 2023 | httpd | 2.4.69-1.amzn2023.0.2 |
| Amazon Linux 2023 | httpd-core | 2.4.69-1.amzn2023.0.2 |
| Amazon Linux 2023 | httpd-devel | 2.4.69-1.amzn2023.0.2 |
| Amazon Linux 2023 | httpd-filesystem | 2.4.69-1.amzn2023.0.2 |
| Amazon Linux 2023 | httpd-manual | 2.4.69-1.amzn2023.0.2 |
| Amazon Linux 2023 | httpd-tools | 2.4.69-1.amzn2023.0.2 |
| Amazon Linux 2023 | mod_http2 | 1:2.4.69-1.amzn2023.0.2 |
| Amazon Linux 2023 | mod_ldap | 2.4.69-1.amzn2023.0.2 |
| Amazon Linux 2023 | mod_lua | 2.4.69-1.amzn2023.0.2 |
| Amazon Linux 2023 | mod_proxy_html | 1:2.4.69-1.amzn2023.0.2 |
| Amazon Linux 2023 | mod_session | 2.4.69-1.amzn2023.0.2 |
| Amazon Linux 2023 | mod_ssl | 1:2.4.69-1.amzn2023.0.2 |
| Debian 12 | apache2 | no fix |
| Debian 13 | apache2 | 2.4.69-1~deb13u1 |
| Debian 14 | apache2 | 2.4.69-1 |
| Red Hat hummingbird 1 | httpd | 0:2.4.69-1.hum1 |
| Red Hat hummingbird 1 | httpd-core | 0:2.4.69-1.hum1 |
| Red Hat hummingbird 1 | httpd-devel | 0:2.4.69-1.hum1 |
| Red Hat hummingbird 1 | httpd-filesystem | 0:2.4.69-1.hum1 |
| Red Hat hummingbird 1 | httpd-manual | 0:2.4.69-1.hum1 |
| Red Hat hummingbird 1 | httpd-tools | 0:2.4.69-1.hum1 |
| Red Hat hummingbird 1 | mod_ldap | 0:2.4.69-1.hum1 |
| Red Hat hummingbird 1 | mod_lua | 0:2.4.69-1.hum1 |
| Red Hat hummingbird 1 | mod_proxy_html | 0:2.4.69-1.hum1 |
| Red Hat hummingbird 1 | mod_session | 0:2.4.69-1.hum1 |
| Red Hat hummingbird 1 | mod_ssl | 0:2.4.69-1.hum1 |
| Rocky Linux 9 | httpd | 0:2.4.62-13.el9_8.9 |
| Ubuntu 22.04 LTS | apache2 | 2.4.52-1ubuntu4.25 |
| Ubuntu 24.04 LTS | apache2 | 2.4.58-1ubuntu8.17 |
| Ubuntu 26.04 LTS | apache2 | 2.4.66-2ubuntu2.6 |
| Ubuntu 26.10 | apache2 | no fix |
| Ubuntu Pro 14.04 LTS | apache2 | 2.4.7-1ubuntu4.22+esm17 |
| Ubuntu Pro 16.04 LTS | apache2 | 2.4.18-2ubuntu3.17+esm22 |
| Ubuntu Pro 18.04 LTS | apache2 | 2.4.29-1ubuntu4.27+esm13 |
| Ubuntu Pro 20.04 LTS | apache2 | 2.4.41-4ubuntu3.23+esm9 |