https://archive.apache.org/dist/httpd/httpd-2.4.66.tar.gz · Apache HTTP Server 2.4.66 - 'mod_http2' Double-Free Denial of Service
Affects https://archive.apache.org/dist/httpd/httpd-2.4.66.tar.gzSource Exploit-DB RSS Feed
Rated by Threat Radar
Data as of 24 Jun 2026, 22:21 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| https://httpd.apache.org https://archive.apache.org/dist/httpd/httpd-2.4.66.tar.gz | Affected
| Fixed in– |
AI-suggested
Until an official fix is released, consider disabling the 'mod_http2' module if feasible to mitigate the risk of denial of service. Monitor official Apache HTTP Server communications for updates regarding a patch or workaround.
Description
Apache HTTP Server version 2.4.66 contains a double-free vulnerability in the 'mod_http2' module that can lead to a denial of service condition. This vulnerability allows an attacker to cause the server to crash by triggering improper memory management in the HTTP/2 module. The issue affects specifically version 2.4.66 and has been classified with medium severity. No official patch or remediation details are provided in the available data. There are no known exploits in the wild at this time.