PT-2026-47316 · Apache+4 · Apache Http Server+4

Elhanan Haenel

+1

·

CVE-2026-34355

·

Published

2026-03-21

·

Updated

2026-08-27

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.68
Description A buffer overflow occurs in the mod proxy html module, which can be triggered by an untrusted backend.
Recommendations Upgrade to version 2.4.68.

Fix

DoS

Heap Based Buffer Overflow

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-122CWE-120

Related Identifiers

ALSA-2026:34109
ALSA-2026:41906
ALSA-2026:42828
AZL-89750
BDU:2026-09748
BIT-APACHE-2026-34355
CVE-2026-34355
ECHO-A5E9-C007-E46C
OESA-2026-2744
OESA-2026-2745
OESA-2026-2746
OESA-2026-2747
OPENSUSE-SU-2026:21235-1
RHSA-2026:25042
RHSA-2026:34109
RHSA-2026:42828
RHSA-2026:47046
SUSE-SU-2026:22564-1
SUSE-SU-2026:2686-1
SUSE-SU-2026:2717-1
SUSE-SU-2026:2735-1
SUSE-SU-2026:2759-1
USN-8516-1
USN-8571-1

Affected Products

Apache Http Server
Linuxmint
Red Os
Rocky Linux
Ubuntu