CVE-2026-34355
🟡 Monitoruj
Przepełnienie bufora w mod_proxy_html w Apache HTTP Server umożliwia atak z niezaufanego backendu.
CVSS
7.5
EPSS
1.1%
Exploit
none
Vendor
apache
Opis źródłowy (NVD)
A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.
buffer-overflow
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 7.5 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 1.1% |
| Opublikowano (NVD) | 2026-06-08 16:16:38 UTC |
| Ostatnia modyfikacja (NVD) | 2026-08-27 13:17:41 UTC |
Referencje
- https://httpd.apache.org/security/vulnerabilities_24.html (security@apache.org) [Vendor Advisory]
- http://www.openwall.com/lists/oss-security/2026/06/08/6 (af854a3a-2127-422b-91ae-364da2661108) [Mailing List]
- https://access.redhat.com/errata/RHSA-2026:25042 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:34109 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:41906 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:42828 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:47046 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:53371 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:56868 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:56869 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/security/cve/CVE-2026-34355 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://bugzilla.redhat.com/show_bug.cgi?id=2486414 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34355.json (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)