一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-48834 [HIGH] – Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer. This

未分类
📑 文章目录

Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.1.

Unauthenticated attackers can cause a denial of service via a specially crafted Accept-Language header that triggers excessive CPU consumption during parsing.
Users are recommended to upgrade to version 2.0.2, which fixes the issue.