PT-2026-47323 · Apache+4 · Apache Http Server+4

·

CVE-2026-44185

·

Published

2026-04-27

·

Updated

2026-08-27

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.67
Description A buffer over-read occurs during outbound OCSP (Online Certificate Status Protocol) requests sent to an attacker-controlled OCSP server. A buffer over-read is a condition where a system reads data past the end of the intended buffer, potentially exposing sensitive information from memory.
Recommendations Upgrade to version 2.4.68.

Fix

DoS

Buffer Over-read

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:34109
ALSA-2026:41906
ALSA-2026:42828
AZL-89747
BDU:2026-09763
BIT-APACHE-2026-44185
CVE-2026-44185
ECHO-0E26-F84C-025F
OPENSUSE-SU-2026:21235-1
RHSA-2026:25042
RHSA-2026:34109
RHSA-2026:42828
RHSA-2026:47046
SUSE-SU-2026:22564-1
SUSE-SU-2026:2686-1
SUSE-SU-2026:2717-1
SUSE-SU-2026:2735-1
SUSE-SU-2026:2759-1
USN-8516-1
USN-8571-1

Affected Products

Apache Http Server
Linuxmint
Red Os
Rocky Linux
Ubuntu