CVE-2026-43951

Опубликовано: 08 июн. 2026

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages.

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Ссылки

https://httpd.apache.org/security/vulnerabilities_24.html
Vendor Advisory
http://www.openwall.com/lists/oss-security/2026/06/08/10
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Версия от 2.4.0 (включая) до 2.4.67 (включая)

EPSS

Процентиль: 43%

0.00545

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVE-2026-43951

CVSS3: 6.5

ubuntu

около 2 месяцев назад

Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

CVE-2026-43951

CVSS3: 6.5

redhat

около 2 месяцев назад

Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

CVE-2026-43951

msrc

около 2 месяцев назад

Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash

CVE-2026-43951

CVSS3: 6.5

debian

около 2 месяцев назад

Out-of-bounds Read vulnerability in Apache HTTP Server with mod_header ...

GHSA-4qxr-h6g3-8f95

CVSS3: 6.5

github

около 2 месяцев назад

Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

EPSS

Процентиль: 43%

0.00545

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-125