CVE-2026-44185
EUVD-2026-3509908.06.2026, 16:16
Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | http_server | 2.4.0 ≤ 𝑥 < 2.4.68 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | 0:2.4.63-13.el10_2.4 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 8100020260714175253.489197e6 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:2.4.62-13.el9_8.5 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 2.4.68-1.hum1 ≤ 𝑥 < * | ADP |
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| apache2 |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| apache2 |
| ||||||||||||||||||||
| apache2-devel |
| ||||||||||||||||||||
| apache2-doc |
| ||||||||||||||||||||
| apache2-example-pages |
| ||||||||||||||||||||
| apache2-manual |
| ||||||||||||||||||||
| apache2-prefork |
| ||||||||||||||||||||
| apache2-tls13 |
| ||||||||||||||||||||
| apache2-tls13-devel |
| ||||||||||||||||||||
| apache2-tls13-doc |
| ||||||||||||||||||||
| apache2-tls13-example-pages |
| ||||||||||||||||||||
| apache2-tls13-prefork |
| ||||||||||||||||||||
| apache2-tls13-utils |
| ||||||||||||||||||||
| apache2-tls13-worker |
| ||||||||||||||||||||
| apache2-utils |
| ||||||||||||||||||||
| apache2-worker |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| httpd |
| ||
| httpd-core |
| ||
| httpd-devel |
| ||
| httpd-filesystem |
| ||
| httpd-manual |
| ||
| httpd-tools |
| ||
| mod |
|
Amazon Linux Releases
Amazon Package | |||||
|---|---|---|---|---|---|
| httpd |
| ||||
| httpd-core |
| ||||
| httpd-core-debuginfo |
| ||||
| httpd-debuginfo |
| ||||
| httpd-debugsource |
| ||||
| httpd-devel |
| ||||
| httpd-filesystem |
| ||||
| httpd-manual |
| ||||
| httpd-tools |
| ||||
| httpd-tools-debuginfo |
| ||||
| mod_ldap |
| ||||
| mod_ldap-debuginfo |
| ||||
| mod_lua |
| ||||
| mod_lua-debuginfo |
| ||||
| mod_md |
| ||||
| mod_proxy_html |
| ||||
| mod_proxy_html-debuginfo |
| ||||
| mod_session |
| ||||
| mod_session-debuginfo |
| ||||
| mod_ssl |
| ||||
| mod_ssl-debuginfo |
|
Common Weakness Enumeration
Vulnerability Media Exposure
References