Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69...

zetlyn/cve-ghsa vulnerability ghsa GHSA-gr5c-77fq-wx32 cve CVE-2026-73637 known 2026-10-01

https://github.com/advisories/GHSA-gr5c-77fq-wx32

Properties

cvss

cvss	7.3 receipt Source GitHub advisories Its words `7.3` Read by `field:cvss.score` Said since 2026-10-02 11:59 UTC Last answered 2026-10-05 12:22 UTC Original open at the source What the source handed over { "credits": [], "cve_id": "CVE-2026-73637", "cvss": { "score": 7.3, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, "cvss_severities": { "cvss_v3": { "score": 7.3, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, "cvss_v4": { "score": 0.0, "vector_string": null } }, "cwes": [ { "cwe_id": "CWE-416", "name": "Use After Free" } ], "description": "Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0.\n\nUsers are recommended to upgrade to version 2.4.69, which fixes this issue.", "ghsa_id": "GHSA-gr5c-77fq-wx32", "github_reviewed_at": null, "html_url": "https://github.com/advisories/GHSA-gr5c-77fq-wx32", "identifiers": [ { "type": "GHSA", "value": "GHSA-gr5c-77fq-wx32" }, { "type": "CVE", "value": "CVE-2026-73637" } ], "nvd_published_at": "2026-10-01T17:17:31Z", "published_at": "2026-10-01T18:32:46Z", "references": [ "https://nvd.nist.gov/vuln/detail/CVE-2026-73637", "https://httpd.apache.org/security/vulnerabilities_24.html", "http://www.openwall.com/lists/oss-security/2026/10/01/28", "https://github.com/advisories/GHSA-gr5c-77fq-wx32" ], "repository_advisory_url": null, "severity": "high", "source_code_location": "", "summary": "Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69...", "type": "unreviewed", "updated_at": "2026-10-01T21:33:58Z", "url": "https://api.github.com/advisories/GHSA-gr5c-77fq-wx32", "vulnerabilities": [], "withdrawn_at": null }
cwe	CWE-416 receipt Source GitHub advisories Its words `CWE-416` Read by `field:cwes[].cwe_id` Said since 2026-10-02 11:59 UTC Last answered 2026-10-05 12:22 UTC Original open at the source What the source handed over { "credits": [], "cve_id": "CVE-2026-73637", "cvss": { "score": 7.3, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, "cvss_severities": { "cvss_v3": { "score": 7.3, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, "cvss_v4": { "score": 0.0, "vector_string": null } }, "cwes": [ { "cwe_id": "CWE-416", "name": "Use After Free" } ], "description": "Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0.\n\nUsers are recommended to upgrade to version 2.4.69, which fixes this issue.", "ghsa_id": "GHSA-gr5c-77fq-wx32", "github_reviewed_at": null, "html_url": "https://github.com/advisories/GHSA-gr5c-77fq-wx32", "identifiers": [ { "type": "GHSA", "value": "GHSA-gr5c-77fq-wx32" }, { "type": "CVE", "value": "CVE-2026-73637" } ], "nvd_published_at": "2026-10-01T17:17:31Z", "published_at": "2026-10-01T18:32:46Z", "references": [ "https://nvd.nist.gov/vuln/detail/CVE-2026-73637", "https://httpd.apache.org/security/vulnerabilities_24.html", "http://www.openwall.com/lists/oss-security/2026/10/01/28", "https://github.com/advisories/GHSA-gr5c-77fq-wx32" ], "repository_advisory_url": null, "severity": "high", "source_code_location": "", "summary": "Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69...", "type": "unreviewed", "updated_at": "2026-10-01T21:33:58Z", "url": "https://api.github.com/advisories/GHSA-gr5c-77fq-wx32", "vulnerabilities": [], "withdrawn_at": null }
severity	high From 7.0 to 8.9. receipt Source GitHub advisories Its words `high` Read by `field:severity` Said since 2026-10-02 11:59 UTC Last answered 2026-10-05 12:22 UTC Original open at the source What the source handed over { "credits": [], "cve_id": "CVE-2026-73637", "cvss": { "score": 7.3, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, "cvss_severities": { "cvss_v3": { "score": 7.3, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, "cvss_v4": { "score": 0.0, "vector_string": null } }, "cwes": [ { "cwe_id": "CWE-416", "name": "Use After Free" } ], "description": "Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0.\n\nUsers are recommended to upgrade to version 2.4.69, which fixes this issue.", "ghsa_id": "GHSA-gr5c-77fq-wx32", "github_reviewed_at": null, "html_url": "https://github.com/advisories/GHSA-gr5c-77fq-wx32", "identifiers": [ { "type": "GHSA", "value": "GHSA-gr5c-77fq-wx32" }, { "type": "CVE", "value": "CVE-2026-73637" } ], "nvd_published_at": "2026-10-01T17:17:31Z", "published_at": "2026-10-01T18:32:46Z", "references": [ "https://nvd.nist.gov/vuln/detail/CVE-2026-73637", "https://httpd.apache.org/security/vulnerabilities_24.html", "http://www.openwall.com/lists/oss-security/2026/10/01/28", "https://github.com/advisories/GHSA-gr5c-77fq-wx32" ], "repository_advisory_url": null, "severity": "high", "source_code_location": "", "summary": "Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69...", "type": "unreviewed", "updated_at": "2026-10-01T21:33:58Z", "url": "https://api.github.com/advisories/GHSA-gr5c-77fq-wx32", "vulnerabilities": [], "withdrawn_at": null }

7.3

receipt

Source: GitHub advisories
Its words: 7.3
Read by: field:cvss.score
Said since: 2026-10-02 11:59 UTC
Last answered: 2026-10-05 12:22 UTC
Original: open at the source

What the source handed over

{
  "credits": [],
  "cve_id": "CVE-2026-73637",
  "cvss": {
    "score": 7.3,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 7.3,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
    },
    "cvss_v4": {
      "score": 0.0,
      "vector_string": null
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-416",
      "name": "Use After Free"
    }
  ],
  "description": "Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0.\n\nUsers are recommended to upgrade to version 2.4.69, which fixes this issue.",
  "ghsa_id": "GHSA-gr5c-77fq-wx32",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-gr5c-77fq-wx32",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-gr5c-77fq-wx32"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-73637"
    }
  ],
  "nvd_published_at": "2026-10-01T17:17:31Z",
  "published_at": "2026-10-01T18:32:46Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-73637",
    "https://httpd.apache.org/security/vulnerabilities_24.html",
    "http://www.openwall.com/lists/oss-security/2026/10/01/28",
    "https://github.com/advisories/GHSA-gr5c-77fq-wx32"
  ],
  "repository_advisory_url": null,
  "severity": "high",
  "source_code_location": "",
  "summary": "Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69...",
  "type": "unreviewed",
  "updated_at": "2026-10-01T21:33:58Z",
  "url": "https://api.github.com/advisories/GHSA-gr5c-77fq-wx32",
  "vulnerabilities": [],
  "withdrawn_at": null
}

cwe

CWE-416

receipt

Source: GitHub advisories
Its words: CWE-416
Read by: field:cwes[].cwe_id
Said since: 2026-10-02 11:59 UTC
Last answered: 2026-10-05 12:22 UTC
Original: open at the source

What the source handed over

{
  "credits": [],
  "cve_id": "CVE-2026-73637",
  "cvss": {
    "score": 7.3,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 7.3,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
    },
    "cvss_v4": {
      "score": 0.0,
      "vector_string": null
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-416",
      "name": "Use After Free"
    }
  ],
  "description": "Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0.\n\nUsers are recommended to upgrade to version 2.4.69, which fixes this issue.",
  "ghsa_id": "GHSA-gr5c-77fq-wx32",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-gr5c-77fq-wx32",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-gr5c-77fq-wx32"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-73637"
    }
  ],
  "nvd_published_at": "2026-10-01T17:17:31Z",
  "published_at": "2026-10-01T18:32:46Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-73637",
    "https://httpd.apache.org/security/vulnerabilities_24.html",
    "http://www.openwall.com/lists/oss-security/2026/10/01/28",
    "https://github.com/advisories/GHSA-gr5c-77fq-wx32"
  ],
  "repository_advisory_url": null,
  "severity": "high",
  "source_code_location": "",
  "summary": "Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69...",
  "type": "unreviewed",
  "updated_at": "2026-10-01T21:33:58Z",
  "url": "https://api.github.com/advisories/GHSA-gr5c-77fq-wx32",
  "vulnerabilities": [],
  "withdrawn_at": null
}

severity

high

From 7.0 to 8.9.

receipt

Source: GitHub advisories
Its words: high
Read by: field:severity
Said since: 2026-10-02 11:59 UTC
Last answered: 2026-10-05 12:22 UTC
Original: open at the source

What the source handed over

{
  "credits": [],
  "cve_id": "CVE-2026-73637",
  "cvss": {
    "score": 7.3,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 7.3,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
    },
    "cvss_v4": {
      "score": 0.0,
      "vector_string": null
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-416",
      "name": "Use After Free"
    }
  ],
  "description": "Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0.\n\nUsers are recommended to upgrade to version 2.4.69, which fixes this issue.",
  "ghsa_id": "GHSA-gr5c-77fq-wx32",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-gr5c-77fq-wx32",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-gr5c-77fq-wx32"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-73637"
    }
  ],
  "nvd_published_at": "2026-10-01T17:17:31Z",
  "published_at": "2026-10-01T18:32:46Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-73637",
    "https://httpd.apache.org/security/vulnerabilities_24.html",
    "http://www.openwall.com/lists/oss-security/2026/10/01/28",
    "https://github.com/advisories/GHSA-gr5c-77fq-wx32"
  ],
  "repository_advisory_url": null,
  "severity": "high",
  "source_code_location": "",
  "summary": "Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69...",
  "type": "unreviewed",
  "updated_at": "2026-10-01T21:33:58Z",
  "url": "https://api.github.com/advisories/GHSA-gr5c-77fq-wx32",
  "vulnerabilities": [],
  "withdrawn_at": null
}

Text

Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69... Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests when AuthDigestNcCheck is enabled or AuthDigestNonceLifetime is set to 0. Users are recommended to upgrade to version 2.4.69, which fixes this issue.