Red Hat Security Advisory: httpd security update

Fixed packages 20

Vulnerabilities 12

• Critical 9.8
  CVE-2026-28780

  Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()

  Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled bytes after…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  May 5, 2026
• Critical 9.8
  CVE-2026-44631

  Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow

  Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026
• High 7.5
  CVE-2024-42516

  Apache HTTP Server: HTTP response splitting

  HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response. This vulnerability was described as CVE-2023-38709 b…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jul 10, 2025
• High 7.5
  CVE-2026-29169

  Apache HTTP Server: mod_dav_lock indirect lock crash

  A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs. The only known use-case for mod_dav_lock was m…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  May 4, 2026
• High 7.5
  CVE-2026-34059

  Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()

  Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  May 4, 2026
• High 7.5
  CVE-2026-34355

  Apache HTTP Server: mod_proxy_html buffer overflow

  A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026
• High 7.5
  CVE-2026-34356

  Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow

  Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie* This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the iss…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026
• High 7.5
  CVE-2026-42536 Public exploit

  Apache HTTP Server: mod_xml2enc heap overflow

  Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026
• High 7.3
  CVE-2026-44185

  Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`

  Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Jun 8, 2026
• Medium 5.3
  CVE-2026-33007

  Apache HTTP Server: mod_authn_socache crash

  A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration. Users are recommended to upgrade to version 2.4.67, which fix…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  May 4, 2026
• Medium 5.3
  CVE-2026-33857

  Apache HTTP Server: Off-by-one OOB reads in AJP getter functions

  Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  May 4, 2026
• Medium 5.3
  CVE-2026-34032

  Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)

  Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  May 4, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2374549
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2464940
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2464952
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2464953
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2465296
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2465299
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2466913
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486395
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486397
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486399
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486411
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2486414
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47046.json
• report
  https://access.redhat.com/security/cve/CVE-2024-42516
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-42516
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-42516
• article
  https://httpd.apache.org/security/vulnerabilities_24.html
• report
  https://access.redhat.com/security/cve/CVE-2026-28780
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-28780
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-28780
• report
  https://access.redhat.com/security/cve/CVE-2026-29169
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-29169
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-29169
• report
  https://access.redhat.com/security/cve/CVE-2026-33007
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-33007
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-33007
• report
  https://access.redhat.com/security/cve/CVE-2026-33857
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-33857
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-33857
• report
  https://access.redhat.com/security/cve/CVE-2026-34032
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-34032
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-34032
• report
  https://access.redhat.com/security/cve/CVE-2026-34059
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-34059
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-34059
• report
  https://access.redhat.com/security/cve/CVE-2026-34355
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-34355
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-34355