UBUNTU-CVE-2026-93546: Integer Overflow

Q: Who is exposed to this issue?

Systems running Apache HTTP Server with mod_dav_fs enabled are exposed where a WebDAV client has authenticated write access. The issue is relevant to WebDAV-enabled locations that permit PROPPATCH requests.

Q: What access does an attacker need?

An attacker must authenticate as a WebDAV client and have write access. No user interaction is required, and the attack can be performed over the network.

Q: What is the practical impact of successful exploitation?

A successful attack can crash Apache worker processes and persistently corrupt the affected directory's property database. The reported severity vector also indicates high confidentiality, integrity, and availability impact.

Q: How can I tell whether a deployment is potentially affected?

Check whether Apache HTTP Server is version 2.4.68 or earlier, mod_dav_fs is in use, and any WebDAV directory grants authenticated users write access. Such users may be able to send PROPPATCH requests with many declared XML namespaces.

Published Oct 1, 2026

Updated

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces.

Affected Software

8 affected componentsFixes available

ubuntu/apache2<2.4.7-1ubuntu4.22+esm17

2.4.7-1ubuntu4.22+esm17

ubuntu/apache2<2.4.18-2ubuntu3.17+esm22

2.4.18-2ubuntu3.17+esm22

ubuntu/apache2<2.4.29-1ubuntu4.27+esm13

2.4.29-1ubuntu4.27+esm13

ubuntu/apache2<2.4.41-4ubuntu3.23+esm9

2.4.41-4ubuntu3.23+esm9

ubuntu/apache2<2.4.52-1ubuntu4.25

2.4.52-1ubuntu4.25

ubuntu/apache2<2.4.58-1ubuntu8.17

2.4.58-1ubuntu8.17

ubuntu/apache2*

ubuntu/apache2<2.4.66-2ubuntu2.6

2.4.66-2ubuntu2.6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/apache2 to a version that resolves this vulnerability.
Fixed in 2.4.7-1ubuntu4.22+esm17
Upgrade
Upgrade ubuntu/apache2 to a version that resolves this vulnerability.
Fixed in 2.4.18-2ubuntu3.17+esm22
Upgrade
Upgrade ubuntu/apache2 to a version that resolves this vulnerability.
Fixed in 2.4.29-1ubuntu4.27+esm13
Upgrade
Upgrade ubuntu/apache2 to a version that resolves this vulnerability.
Fixed in 2.4.41-4ubuntu3.23+esm9
Upgrade
Upgrade ubuntu/apache2 to a version that resolves this vulnerability.
Fixed in 2.4.52-1ubuntu4.25
Upgrade
Upgrade ubuntu/apache2 to a version that resolves this vulnerability.
Fixed in 2.4.58-1ubuntu8.17
Upgrade
Upgrade ubuntu/apache2 to a version that resolves this vulnerability.
Fixed in 2.4.66-2ubuntu2.6

Event History

Oct 1, 2026

CVE Published

via OSV·05:17 PM

Data Sourced

via OSV·05:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Systems running Apache HTTP Server with mod_dav_fs enabled are exposed where a WebDAV client has authenticated write access. The issue is relevant to WebDAV-enabled locations that permit PROPPATCH requests.

What access does an attacker need?

An attacker must authenticate as a WebDAV client and have write access. No user interaction is required, and the attack can be performed over the network.

What is the practical impact of successful exploitation?

A successful attack can crash Apache worker processes and persistently corrupt the affected directory's property database. The reported severity vector also indicates high confidentiality, integrity, and availability impact.

How can I tell whether a deployment is potentially affected?

Check whether Apache HTTP Server is version 2.4.68 or earlier, mod_dav_fs is in use, and any WebDAV directory grants authenticated users write access. Such users may be able to send PROPPATCH requests with many declared XML namespaces.

UBUNTU-CVE-2026-93546: Integer Overflow

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

What access does an attacker need?

What is the practical impact of successful exploitation?

How can I tell whether a deployment is potentially affected?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What access does an attacker need?

What is the practical impact of successful exploitation?

How can I tell whether a deployment is potentially affected?