← CVE Intelligence

CVE-2026-114459

Mod_qos: out-of-bounds reads in response-body substring matching PUBLISHED

Description (CNA)

A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering specifically crafted server responses, causing an Apache worker process to crash and resulting in a Denial of Service (DoS).

Affected (CNA)

Vendor / productVersions
pbuchbinder / mod_qosaffected 11.74; affected 11.76; affected 11.79

CWE

CWE-125

References