Read the docs
Red Hat Security Advisory

RHSA-2026:67152

httpd security update

Released 2026-09-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 15 records

TI-2026-23285 CVE-2026-29167 · GHSA-85f4-9pxx-739j

Apache HTTP Server: mod_ldap per-dir use-after-free

Priority MEDIUM 50

Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00688 Published 2026-06-08 Partial fix CWE-416
TI-2026-30816 CVE-2026-42536 · GHSA-2p7m-6jhq-26cm

Apache HTTP Server: mod_xml2enc heap overflow

Priority MEDIUM 41

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01024 Published 2026-06-08 Partial fix CWE-122
TI-2026-26642 CVE-2026-34355 · GHSA-3qgf-pp84-379f

Apache HTTP Server: mod_proxy_html buffer overflow

Priority MEDIUM 41

A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01161 Published 2026-06-08 Partial fix CWE-122
TI-2026-26643 CVE-2026-34356 · GHSA-9gq3-xc6j-h3g5

Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow

Priority MEDIUM 40

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie* This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00708 Published 2026-06-08 Fixed CWE-122
TI-2026-23287 CVE-2026-29169 · GHSA-jmv5-rcpx-7f7r

Apache HTTP Server: mod_dav_lock indirect lock crash

Priority MEDIUM 40

A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00594 Published 2026-05-04 Partial fix CWE-476
TI-2024-28481 CVE-2024-42516 · GHSA-5j7h-7m92-jgh4

Apache HTTP Server: HTTP response splitting

Priority MEDIUM 40

HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00818 Published 2025-07-10 Partial fix CWE-20
TI-2026-32165 CVE-2026-44186 · GHSA-6cr8-qx2w-7743

Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp

Priority LOW 39

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00583 Published 2026-06-08 Partial fix CWE-835
TI-2026-32164 CVE-2026-44185 · GHSA-2756-g6w2-6hv2

Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`

Priority LOW 39

Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00741 Published 2026-06-08 Partial fix CWE-126
TI-2026-25455 CVE-2026-33007 · GHSA-cj6w-grf6-jq78

Apache HTTP Server: mod_authn_socache crash

Priority LOW 31

A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00514 Published 2026-05-04 Partial fix CWE-476