News for hackers. Stuff that matters.

A comment on Critical RCE Vulnerability in Apache HTTP Server. Parent comment

Re:Critical RCE Vulnerability in Apache HTTP Server by fooqux on Wednesday November 11, 2026 @10:16PM (#50462600)
If you can corrupt memory in a controllable way, you can get a computer to do just about anything that process has rights to. Possibly even the kernel, if you can get at some shared memory.
[ Parent | on HN ]
Re:Critical RCE Vulnerability in Apache HTTP Server by kgeist on Wednesday November 11, 2026 @10:19PM (#50462630)
But it's not a given that memory corruption is exploitable. I thought to call something an RCE you need a working exploit?
[ Parent | on HN ]
Re:Critical RCE Vulnerability in Apache HTTP Server by edoceo on Wednesday November 11, 2026 @10:25PM (#50462669)
Isn't resource consumption a DoS?
[ Parent | on HN ]
Re:Critical RCE Vulnerability in Apache HTTP Server by woodruffw on Wednesday November 11, 2026 @10:29PM (#50462699)
A denial of service is a different class of vulnerability (a minor one, generally).
[ Parent | on HN ]
Re:Critical RCE Vulnerability in Apache HTTP Server by stonogo on Wednesday November 11, 2026 @10:44PM (#50462821)
Presumably one of Anthropic, Google, or Apache possesses a working exploit, because the official Apache Foundation report on this CVE claims RCE is possible.
[ Parent | on HN ]