Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's mod_md via OCSP response data.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Jun 17, 2026 · NIST NVD

   Updated

   Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's mod_md via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

2. Oct 15, 2026 · Apache Software Foundation

   Detected

   Named on the public Apache Software Foundation page.

Affected

• cpe apache/http serverversion unspecified

Sources

• Apache Software FoundationVendor advisoryCVE-2026-29168

  Named on the public Apache Software Foundation page.

  httpd.apache.org
• CVE.orgVulnerability recordCVE-2026-29168

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-29168

  Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's mod_md via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

  nvd.nist.gov

References

• Mailing List · openwall.com
• Release Notes · httpd.apache.org