CVE-2026-34355

Опубликовано: 08 июн. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Версия от 2.4.0 (включая) до 2.4.68 (исключая)

EPSS

Процентиль: 62%

0.01089

Низкий

7.5 High

CVSS3

Дефекты

CWE-122

CWE-120

Связанные уязвимости

CVE-2026-34355

CVSS3: 7.5

ubuntu

около 2 месяцев назад

A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.

CVE-2026-34355

CVSS3: 7.5

redhat

около 2 месяцев назад

A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.

CVE-2026-34355

msrc

около 2 месяцев назад

Apache HTTP Server: mod_proxy_html buffer overflow

CVE-2026-34355

CVSS3: 7.5

debian

около 2 месяцев назад

A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and e ...

GHSA-3qgf-pp84-379f

CVSS3: 7.5

github

около 2 месяцев назад

A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.

EPSS

Процентиль: 62%

0.01089

Низкий

7.5 High

CVSS3

Дефекты

CWE-122

CWE-120