Skip to main content

Apache HTTP Server CVE-2026-44185

| EUVDEUVD-2026-35099 HIGH
Buffer Over-read (CWE-126)
2026-06-08 apache GHSA-2756-g6w2-6hv2
Buffer Overflow Apache Apache Http Server Apache Software Foundation
7.3
CVSS 3.1 · Vendor: apache
Share

Severity by source

Vendor (apache) PRIMARY
7.3 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
SUSE
MEDIUM
qualitative
Red Hat
7.3 HIGH
qualitative

Primary rating from Vendor (apache).

CVSS VectorVendor: apache

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Lifecycle Timeline

4
Analysis Generated
Jun 08, 2026 - 19:27 vuln.today
CVSS changed
Jun 08, 2026 - 19:22 NVD
7.3 (HIGH)
CVE Published
Jun 08, 2026 - 15:22 nvd
UNKNOWN (no severity yet)
CVE Published
Jun 08, 2026 - 15:22 nvd
HIGH 7.3

DescriptionCVE.org

Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.

AnalysisAI

Buffer over-read in Apache HTTP Server 2.4.0 through 2.4.67 allows remote attackers to trigger memory disclosure or limited integrity and availability impact via outbound OCSP requests sent to an attacker-controlled OCSP responder. The flaw stems from improper bounds handling (CWE-126) when parsing OCSP response data, and currently shows no public exploit identified at time of analysis despite a CVSS 7.3 rating reflecting unauthenticated network reachability with low complexity.

Technical ContextAI

The affected component is Apache HTTP Server's mod_ssl OCSP (Online Certificate Status Protocol) client path, which performs outbound HTTP requests to OCSP responders to verify the revocation status of TLS certificates (typically as part of OCSP stapling or client certificate validation). The root cause is CWE-126 (Buffer Over-read), where the parser reads past the intended end of a buffer when handling crafted OCSP response data, leaking adjacent memory contents or causing instability. The CPE cpe:2.3:a:apache_software_foundation:apache_http_server:*:*:*:*:*:*:*:* confirms all 2.4.x releases up to and including 2.4.67 are in scope, spanning a long-lived 2.4 branch widely deployed as a reverse proxy, TLS terminator, and general-purpose web server across Linux, BSD, and Windows.

RemediationAI

Vendor-released patch: upgrade to Apache HTTP Server 2.4.68, which the Apache Software Foundation explicitly identifies as the fixed version (see https://httpd.apache.org/security/vulnerabilities_24.html). If immediate upgrade is not feasible, the most direct compensating control is to disable OCSP-driven outbound requests by turning off OCSP stapling (SSLUseStapling off) and any client-certificate OCSP verification (SSLOCSPEnable off), which removes the vulnerable code path at the cost of losing real-time revocation checking and degrading TLS certificate trust posture. Additional defense-in-depth options include egress-filtering httpd's outbound HTTP traffic to an allowlist of known-good OCSP responder hostnames (trade-off: breaks revocation checks for certificates whose responders are not pre-enumerated) and constraining which CAs/certificates the server will validate so attacker-controlled OCSP URLs cannot enter the trust path. Track the issue under ENISA EUVD-2026-35099 and the VulDB entry at https://vuldb.com/vuln/369206.

More in Apache Http Server

View all
CVE-2026-23918 HIGH POC
8.8 May 04

Remote code execution via double-free memory corruption in Apache HTTP Server 2.4.66's HTTP/2 protocol implementation al
CVE-2026-34059 HIGH POC
7.5 May 04

Buffer over-read in Apache HTTP Server through 2.4.66 enables remote unauthenticated information disclosure at network s
CVE-2026-28780 CRITICAL
9.8 May 05

Remote heap buffer overflow in Apache HTTP Server's mod_proxy_ajp module allows complete system compromise when proxying
CVE-2026-29167 CRITICAL
9.8 Jun 08

Remote code execution in Apache HTTP Server versions 2.4.0 through 2.4.67 is possible through a use-after-free condition
CVE-2026-42535 CRITICAL
9.1 Jun 08

Improper path handling in the mod_dav_fs module of Apache HTTP Server 2.4.67 and earlier permits a WebDAV content author
CVE-2026-24072 HIGH
8.8 May 04

Local .htaccess authors can escalate privileges to read arbitrary files as the httpd daemon user in Apache HTTP Server 2
CVE-2026-29169 HIGH
7.5 May 04

Remote attackers can crash Apache HTTP Server 2.4.66 and earlier by sending malicious requests that trigger a NULL point
CVE-2026-42536 HIGH
7.5 Jun 08

Denial of service in Apache HTTP Server 2.4.0 through 2.4.67 allows remote unauthenticated attackers to crash the server
CVE-2026-34355 HIGH
7.5 Jun 08

Denial of service in Apache HTTP Server 2.4.0 through 2.4.67 stems from a heap buffer overflow in the mod_proxy_html out
CVE-2026-34356 HIGH
7.5 Jun 08

Denial of service in Apache HTTP Server versions 2.4.0 through 2.4.67 stems from a heap-based buffer overflow triggered

CVE-2026-29168 HIGH
7.3 May 05

Uncontrolled resource consumption in Apache HTTP Server's mod_md module allows remote unauthenticated attackers to exhau
CVE-2026-48913 HIGH
7.3 Jun 08

Use-after-free in the mod_http2 module of Apache HTTP Server versions 2.4.55 through 2.4.67 allows remote attackers to t

Same weakness CWE-126 – Buffer Over-read

View all
CVE-2017-7668 HIGH
7.5
CVE-2017-7679 CRITICAL POC
9.8
CVE-2021-34584 CRITICAL POC
9.1
CVE-2022-1987 HIGH POC
8.1
CVE-2022-1908 HIGH POC
8.1
CVE-2022-1907 HIGH POC
8.1
CVE-2026-64905 HIGH
7.8
CVE-2023-0817 HIGH POC
7.8

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7 Affected
SUSE Linux Enterprise Module for Package Hub 15 SP7 Affected
SUSE Linux Enterprise Module for Server Applications 15 SP7 Affected

Share

CVE-2026-44185 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy