Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-44185

Опубликовано: 08 июн. 2026
Источник: nvd
CVSS3: 7.3
EPSS Низкий

Описание

Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server

This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.

Users are recommended to upgrade to version 2.4.68, which fixes the issue.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
Версия от 2.4.0 (включая) до 2.4.68 (исключая)

EPSS

Процентиль: 44%
0.00598
Низкий

7.3 High

CVSS3

Дефекты

CWE-126
CWE-125

Связанные уязвимости

ubuntu логотип

CVE-2026-44185

CVSS3: 7.3
ubuntu
около 2 месяцев назад

Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

redhat логотип

CVE-2026-44185

CVSS3: 7.3
redhat
около 2 месяцев назад

Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

msrc логотип

CVE-2026-44185

msrc
около 1 месяца назад

Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`

debian логотип

CVE-2026-44185

CVSS3: 7.3
debian
около 2 месяцев назад

Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP ...

github логотип

GHSA-2756-g6w2-6hv2

CVSS3: 7.3
github
около 2 месяцев назад

Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

EPSS

Процентиль: 44%
0.00598
Низкий

7.3 High

CVSS3

Дефекты

CWE-126
CWE-125