CVE-2025-53020 — Apache HTTP Server: HTTP/2 DoS by Memory Increase

CVE-2025-53020

Apache HTTP Server: HTTP/2 DoS by Memory Increase PUBLISHED

Description (CNA)

Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes the issue.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache HTTP Server	affected 2.4.17 through 2.4.63

CWE

CWE-401

References

https://httpd.apache.org/security/vulnerabilities_24.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://lists.debian.org/debian-lts-announce/2025/08/msg00009.html
http://www.openwall.com/lists/oss-security/2025/07/10/10