Description

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

Remediation

References

CVE-2026-42536

Related Vulnerabilities

WordPress Plugin STT2 Extension Add Terms Unspecified Vulnerability (1.0.2)

PHP Deserialization of Untrusted Data Vulnerability (CVE-2007-1701)

Squid Missing Release of Resource after Effective Lifetime Vulnerability (CVE-2018-19132)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0124)

Django Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2011-0698)

Severity

High

Classification

CVE-2026-42536 CWE-122 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities