CVE-2023-31122: Apache HTTP Server

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

Affected products

• Apache HTTP Server: before 2.4.58 (fixed in 2.4.58)
• Debian Debian Linux: version 10.0 only
• Fedoraproject Fedora: version 38 only

Published 2023-10-23. Last modified 2026-06-17.