← CVE Intelligence

CVE-2026-34355

Apache HTTP Server: mod_proxy_html buffer overflow PUBLISHED

Description (CNA)

A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache HTTP Serveraffected 2.4.0 through 2.4.67

CWE

CWE-122

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

redhat-SADP

A vulnerability has been identified in the Apache HTTP Server. If the server is configured to connect to a malicious or compromised backend server, an attacker could exploit this flaw to bypass security controls or run unauthorized code on the system.