{"id":"CVE-2026-63292","published":"2026-10-01T17:17:29.803","lastModified":"2026-10-05T17:47:01.560","description":"Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when VirtualDocumentRoot uses a hostname format specifier and LimitRequestFieldSize is raised above the default.\n\nUsers are recommended to upgrade to version 2.4.69, which fixes this issue.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-121"],"vendors":["apache"],"products":["http server"],"references":[{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/01/24","tags":["Mailing List","Third Party Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack-based buffer overflow in Apache's mod_vhost_alias module allows remote attackers to cause denial of service or potentially execute arbitrary code when processing HTTP requests with oversized Host headers. This occurs specifically when VirtualDocumentRoot uses hostname format specifiers and the LimitRequestFieldSize is increased above default values.","exploitability":"Exploitation appears moderately difficult as it requires a specific configuration involving VirtualDocumentRoot with hostname format specifiers and raised LimitRequestFieldSize, but once configured, remote attackers can trigger the overflow with a single oversized Host header request.","blast_radius":"The vulnerability could affect any Apache HTTP Server instance running version 2.4.68 or earlier with the specific mod_vhost_alias configuration, potentially leading to widespread denial of service or code execution across multiple virtual hosts.","remediation":"Upgrade to Apache HTTP Server 2.4.69 which fixes this buffer overflow vulnerability in mod_vhost_alias.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["buffer-overflow","dos","web-server"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:04:19.614Z"}}