PT-2026-47321

CVE-2026-43951

·

Published

2026-04-27

·

Updated

2026-10-07

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.67
Description An out-of-bounds read occurs when using mod headers and mod mime in conjunction with multiple response languages. An out-of-bounds read is a condition where a program reads data past the end of the intended buffer, which can lead to information disclosure or system instability.
Recommendations Update Apache HTTP Server to a version later than 2.4.67.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2026:34109
ALSA-2026:34355
ALSA-2026:41906
ALSA-2026:42828
ALSA-2026:59387
AZL-89712
AZL-89729
BIT-APACHE-2026-43951
CLSA-2026-1782153378
CLSA-2026-1782209860
CLSA-2026-1782978404
CLSA-2026-1782980275
CLSA-2026-1782980618
CLSA-2026-1787937441
CLSA-2026-1788178281
ECHO-EE81-535D-843B
OESA-2026-2746
OESA-2026-2747
OESA-2026-2811
OESA-2026-2812
OPENSUSE-SU-2026:21235-1
RHSA-2026:25042
RHSA-2026:34109
RHSA-2026:34355
RHSA-2026:41906
RHSA-2026:42828
RHSA-2026:59387
SUSE-SU-2026:22564-1
SUSE-SU-2026:2686-1
SUSE-SU-2026:2717-1
SUSE-SU-2026:2735-1
SUSE-SU-2026:2759-1
USN-8516-1
USN-8571-1
Found an issue in the description? Have something to add? Feel free to write us 👾