BTC $68,762.42 -6.66%
ETH $1,926.03 -6.09%
BNB $633.61 -6.45%
XRP $1.00 -3.62%
SOL $78.56 -5.44%
TRX $0.3109 -1.96%
DOGE $0.0634 -5.52%
ADA $0.1678 -2.94%
BCH $216.62 -5.68%
LINK $9.69 -4.02%
HYPE $70.81 -1.95%
AAVE $110.32 -6.92%
SUI $0.7709 -5.79%
XLM $0.1419 -3.14%
ZEC $916.91 -6.74%
AAPL $357.16 +0.31%
AMZN $268.19 +0.72%
GOOGL $300.05 +1.56%
MSFT $521.07 -0.05%
META $625.20 -0.56%
NVDA $163.41 +1.31%
TSLA $398.07 +2.62%
SNDK $918.02 -4.13%
INTC $60.75 -0.05%
SPCX $140.22 +0.30%
MU $790.21 -0.16%
AMD $573.04 +1.72%
BTC $68,762.42 -6.66%
ETH $1,926.03 -6.09%
BNB $633.61 -6.45%
XRP $1.00 -3.62%
SOL $78.56 -5.44%
TRX $0.3109 -1.96%
DOGE $0.0634 -5.52%
ADA $0.1678 -2.94%
BCH $216.62 -5.68%
LINK $9.69 -4.02%
HYPE $70.81 -1.95%
AAVE $110.32 -6.92%
SUI $0.7709 -5.79%
XLM $0.1419 -3.14%
ZEC $916.91 -6.74%
AAPL $357.16 +0.31%
AMZN $268.19 +0.72%
GOOGL $300.05 +1.56%
MSFT $521.07 -0.05%
META $625.20 -0.56%
NVDA $163.41 +1.31%
TSLA $398.07 +2.62%
SNDK $918.02 -4.13%
INTC $60.75 -0.05%
SPCX $140.22 +0.30%
MU $790.21 -0.16%
AMD $573.04 +1.72%

era

All
Article
Flash

first_img Apache has a serious vulnerability, and the HTTP/2 service may be subject to remote code execution

A serious security vulnerability has been found in the open-source server software Apache HTTP Server. Attackers can exploit this vulnerability to corrupt server memory by crafting requests when they have access to the affected service, allowing them to execute code with the privileges of the web service process. The vulnerability is located in the HTTP/2 module, and attackers can trigger a concurrent synchronization flaw without authentication, leading to heap memory corruption. If successfully exploited, it allows code execution with the privileges of the Apache worker process and access to data that the process can read.The affected range includes Apache HTTP Server versions 2.4.55 to 2.4.70, as well as mod_h2 versions 2.0.8 to 2.0.42 used separately from GitHub. Red Hat stated that the risk involves servers that enable HTTP/2 through the Protocols directive, including H2 for encrypted connections and H2C for plaintext connections. Administrators need to check both global configurations and individual virtual host configurations; if a CDN or reverse proxy is deployed on the website frontend, it is also necessary to check whether the Apache origin server can be accessed directly via HTTP/2.Apache released HTTP Server 2.4.71 on November 11, 2026, and it is recommended that websites using Apache upgrade immediately. If an upgrade cannot be performed temporarily, HTTP/2 can be disabled as a temporary measure. The issue lies in the assign_headers() function of mod_http2. HTTP/2 allows multiple requests to be processed concurrently over the same connection, and the affected code has a synchronization flaw when handling shared resources, which may lead to heap memory corruption. This vulnerability was discovered by the Anthropic OSS Scanner open-source project and the Google Cloud vulnerability research team. Anthropic reported it to the Apache Foundation on October 26, and the Google Cloud team reported the same vulnerability on November 3.

Grayscale: The various sectors of cryptocurrency are gradually decoupling from Bitcoin's trend, with volatility generally higher than that of Bitcoin

According to a report by Crypto Briefing, Grayscale's research indicates that the correlation between crypto assets and Bitcoin is decreasing, with Bitcoin currently explaining only about 50% of the return volatility across various crypto sectors.The report breaks down the annualized volatility and the impact of Bitcoin-related factors by sector: the annualized volatility of the currency sector is 49%, with 43% attributed to Bitcoin; the annualized volatility of the smart contract platform sector is 58%, with 38% attributed to Bitcoin; the annualized volatility of the finance sector is 59%, with 30% attributed to Bitcoin; the annualized volatility of the utilities and services sector is 67%, with 30% attributed to Bitcoin; the annualized volatility of the consumer and culture sector is 76%, with 46% attributed to Bitcoin; the artificial intelligence sector has the highest annualized volatility at 85%, with only 35% attributed to Bitcoin.The research points out that Bitcoin's own annualized volatility has recently been around 43%, while the volatility of all sectors tracked by Grayscale is higher than that of Bitcoin. The report suggests that lower correlation does not imply lower risk, but the fact that Bitcoin explains only half of the return volatility means that the other half is driven by factors specific to each sector, providing investors with a reference for assessing which sectors can offer true diversification.
app_icon
ChainCatcher Building the Web3 world with innovations.