Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream | httpd | 0:2.4.53-11.el9_2.15 |
| Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream | httpd-core | 0:2.4.53-11.el9_2.15 |
| Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream | mod_ldap | 0:2.4.53-11.el9_2.15 |
| Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream | mod_proxy_html | 1:2.4.53-11.el9_2.15 |
| Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream | mod_ssl | 1:2.4.53-11.el9_2.15 |
Vulnerabilities 15
-
Critical 9.8
Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()
Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled bytes after…
-
Critical 9.8
Apache HTTP Server: mod_ldap per-dir use-after-free
Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
-
Critical 9.8
Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow
Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
-
High 7.5
Apache HTTP Server: HTTP response splitting
HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response. This vulnerability was described as CVE-2023-38709 b…
-
High 7.5
Apache HTTP Server: mod_dav_lock indirect lock crash
A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs. The only known use-case for mod_dav_lock was m…
-
High 7.5
Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()
Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.
-
High 7.5
Apache HTTP Server: mod_proxy_html buffer overflow
A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.
-
High 7.5
Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow
Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie* This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the iss…
-
High 7.5CVE-2026-42536 Public exploit
Apache HTTP Server: mod_xml2enc heap overflow
Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
-
High 7.3
Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`
Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.
-
High 7.3
Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server. This issue affects undefined: from 2.4.0 through 2.4.67. Users are recommended to upgrade to…
-
Medium 6.5
Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash
Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.
-
Medium 5.3
Apache HTTP Server: mod_authn_socache crash
A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration. Users are recommended to upgrade to version 2.4.67, which fix…
-
Medium 5.3
Apache HTTP Server: Off-by-one OOB reads in AJP getter functions
Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.
-
Medium 5.3
Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)
Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2374549
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2464940
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2464952
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2464953
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2465296
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2465299
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2466913
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2486394
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2486395
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2486397
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2486399
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2486402
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2486411
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2486414
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2486415
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67152.json
-
report
https://access.redhat.com/security/cve/CVE-2024-42516
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-42516
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-42516
-
article
https://httpd.apache.org/security/vulnerabilities_24.html
-
report
https://access.redhat.com/security/cve/CVE-2026-28780
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-28780
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-28780
-
report
https://access.redhat.com/security/cve/CVE-2026-29167
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-29167
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-29167
-
report
https://access.redhat.com/security/cve/CVE-2026-29169
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-29169
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-29169
-
report
https://access.redhat.com/security/cve/CVE-2026-33007
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-33007
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-33007
-
report
https://access.redhat.com/security/cve/CVE-2026-33857
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-33857
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-33857
-
report
https://access.redhat.com/security/cve/CVE-2026-34032
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-34032
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-34032