CVE-2025-53020

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-53020
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-53020.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-53020
Aliases
Downstream
ALPINE (1)
ALSA (3)
AZL (2)
BELL (1)
DEBIAN (1)
MGASA (1)
MINI (1)
openSUSE (2)
RHSA (11)
RLSA (3)
ROOT (1)
SUSE (7)
UBUNTU (1)
Related
ALSA (3)
openSUSE (2)
SUSE (7)
Published
2025-07-10T16:59:06Z
Modified
2026-10-24T10:33:12Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Apache HTTP Server: HTTP/2 DoS by Memory Increase
Details

Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server.

This issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63.

Users are recommended to upgrade to version 2.4.64, which fixes the issue.

Database specific 
{
    "cna_assigner": "apache",
    "cwe_ids": [
        "CWE-401"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53020.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "2.4.17"
                        },
                        {
                            "last_affected": "2.4.63"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandardRange"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/apache/httpd

Affected ranges

Type
GIT
Repo
https://github.com/apache/httpd
Events
Introduced
47a9d8e8abf5697b4580c3ee2ade302b5c058fa6
Fixed
7e926454793abd7d71b6afc8bd1ec1648752c6ad
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "2.4.17"
                },
                {
                    "fixed": "2.4.64"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-53020.json"