PT-2026-47316

CVE-2026-34355

·

Published

2026-03-21

·

Updated

2026-10-07

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.68
Description A buffer overflow occurs in the mod proxy html module, which can be triggered by an untrusted backend.
Recommendations Upgrade to version 2.4.68.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-122: Heap-based Buffer Overflow
CWE-120: Buffer Copy without Checking Size of Input (\'Classic Buffer Overflow\')
Related identifiers
CVE-2026-34355
BDU:2026-09748
ALSA-2026:34109
ALSA-2026:41906
ALSA-2026:42828
AZL-89750
BIT-APACHE-2026-34355
CLSA-2026-1781194173
CLSA-2026-1781209763
CLSA-2026-1781210149
CLSA-2026-1781255857
CLSA-2026-1781261042
CLSA-2026-1781273712
CLSA-2026-1781622427
CLSA-2026-1781627270
CLSA-2026-1781628808
CLSA-2026-1782141694
CLSA-2026-1782295363
CLSA-2026-1783698569
ECHO-A5E9-C007-E46C
OESA-2026-2744
OESA-2026-2745
OESA-2026-2746
OESA-2026-2747
OPENSUSE-SU-2026:21235-1
RHSA-2026:25042
RHSA-2026:34109
RHSA-2026:41906
RHSA-2026:42828
RHSA-2026:47046
SUSE-SU-2026:22564-1
SUSE-SU-2026:2686-1
SUSE-SU-2026:2717-1
SUSE-SU-2026:2735-1
SUSE-SU-2026:2759-1
USN-8516-1
USN-8571-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com