CVE-2026-44185
EUVD-2026-3509908.06.2026, 16:16
Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | http_server | 2.4.0 ≤ 𝑥 < 2.4.68 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | JBoss Core Services for RHEL 8 | 0:2.4.62-16.el8jbcs ≤ 𝑥 < * | ADP |
| Red Hat | JBoss Core Services for RHEL 8 | 0:2.0.29-13.el8jbcs ≤ 𝑥 < * | ADP |
| Red Hat | JBoss Core Services for RHEL 8 | 0:1.2.50-17.redhat_1.el8jbcs ≤ 𝑥 < * | ADP |
| Red Hat | JBoss Core Services for RHEL 8 | 1:2.4.28-19.el8jbcs ≤ 𝑥 < * | ADP |
| Red Hat | JBoss Core Services for RHEL 8 | 0:1.3.22-12.el8jbcs ≤ 𝑥 < * | ADP |
| Red Hat | JBoss Core Services for RHEL 8 | 0:2.9.6-19.el8jbcs ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:2.4.63-13.el10_2.4 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | 0:2.4.63-1.el10_0.4 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 8 | 8100020260714175253.489197e6 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9 | 0:2.4.62-13.el9_8.5 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:2.4.62-4.el9_6.6 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat JBoss Core Services 2.4.62.SP5 | httpd24-httpd ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 2.4.68-1.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Insights proxy 1.5 | 1786433656 ≤ 𝑥 < * | ADP |
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| apache2 |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| apache2 |
| ||||||||||||||||||||||||
| apache2-devel |
| ||||||||||||||||||||||||
| apache2-doc |
| ||||||||||||||||||||||||
| apache2-example-pages |
| ||||||||||||||||||||||||
| apache2-manual |
| ||||||||||||||||||||||||
| apache2-prefork |
| ||||||||||||||||||||||||
| apache2-tls13 |
| ||||||||||||||||||||||||
| apache2-tls13-devel |
| ||||||||||||||||||||||||
| apache2-tls13-doc |
| ||||||||||||||||||||||||
| apache2-tls13-example-pages |
| ||||||||||||||||||||||||
| apache2-tls13-prefork |
| ||||||||||||||||||||||||
| apache2-tls13-utils |
| ||||||||||||||||||||||||
| apache2-tls13-worker |
| ||||||||||||||||||||||||
| apache2-utils |
| ||||||||||||||||||||||||
| apache2-worker |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| httpd |
| ||
| httpd-core |
| ||
| httpd-devel |
| ||
| httpd-filesystem |
| ||
| httpd-manual |
| ||
| httpd-tools |
| ||
| mod |
|
Amazon Linux Releases
Amazon Package | |||||
|---|---|---|---|---|---|
| httpd |
| ||||
| httpd-core |
| ||||
| httpd-core-debuginfo |
| ||||
| httpd-debuginfo |
| ||||
| httpd-debugsource |
| ||||
| httpd-devel |
| ||||
| httpd-filesystem |
| ||||
| httpd-manual |
| ||||
| httpd-tools |
| ||||
| httpd-tools-debuginfo |
| ||||
| mod_ldap |
| ||||
| mod_ldap-debuginfo |
| ||||
| mod_lua |
| ||||
| mod_lua-debuginfo |
| ||||
| mod_md |
| ||||
| mod_proxy_html |
| ||||
| mod_proxy_html-debuginfo |
| ||||
| mod_session |
| ||||
| mod_session-debuginfo |
| ||||
| mod_ssl |
| ||||
| mod_ssl-debuginfo |
|
Common Weakness Enumeration
References