ALPINE-CVE-2026-106023: Null Pointer Dereference
Published Nov 11, 2026
·Updated
NULL pointer dereference vulnerability in Apache HTTP Server's modmd during HTTP request processing.
This issue affects Apache HTTP Server: from 2.4.30 through 2.4.69.
Affected Software
1 affected componentFixes available
alpine/apache2<2.4.71-r0
2.4.71-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/apache2to a version that resolves this vulnerability.Fixed in 2.4.71-r0
Event History
Nov 11, 2026
CVE Published
via OSV·03:17 PM
Data Sourced
via OSV·03:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
Which Apache HTTP Server versions are affected?
Apache HTTP Server versions from 2.4.30 through 2.4.69 are affected.
2
When can the vulnerability be triggered?
The NULL pointer dereference occurs during HTTP request processing in mod_md.
3
What is the likely impact of successful exploitation?
The provided information identifies a NULL pointer dereference but does not specify the resulting impact beyond the vulnerability type.