TI-2026-22975 CVE-2026-28780 · GHSA-wpww-4qvv-xpv8
Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()
Priority MEDIUM 52
Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server.
RHSA-2026:22140
httpd:2.4 security update
Released 2026-06-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) httpd-2.4.37-65.module+el8.10.0+24281+ea10630c.8.aarch64::httpd:2.4, httpd-2.4.37-65.module+el8.10.0+24281+ea10630c.8.ppc64le::httpd:2.4, httpd-2.4.37-65.module+el8.10.0+24281+ea10630c.8.s390x::httpd:2.4 +38
Fixes 6 records
TI-2025-33022 CVE-2025-53020 · GHSA-c2vf-6g7v-8m6c
Apache HTTP Server: HTTP/2 DoS by Memory Increase
Priority MEDIUM 47
Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server.
TI-2026-26384 CVE-2026-34059 · GHSA-m35f-pf48-r38q
Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()
Priority LOW 39
Buffer Over-read vulnerability in Apache HTTP Server.
TI-2026-26358 CVE-2026-34032 · GHSA-9r79-gvhp-cr42
Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)
Priority LOW 31
Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.
TI-2026-25455 CVE-2026-33007 · GHSA-cj6w-grf6-jq78
Apache HTTP Server: mod_authn_socache crash
Priority LOW 31
A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration.
TI-2026-26223 CVE-2026-33857 · GHSA-v5qg-p44g-5728
Apache HTTP Server: Off-by-one OOB reads in AJP getter functions
Priority LOW 30
Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server.