BIT-apache-2026-34355

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/apache/BIT-apache-2026-34355.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-apache-2026-34355
Aliases
  • CVE-2026-34355
Published
2026-06-10T08:39:11.068Z
Modified
2026-06-10T09:15:06.156890921Z
Summary
Apache HTTP Server: mod_proxy_html buffer overflow
Details

A buffer overflow in modproxyhtml in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.

Database specific
{
    "cpes": [
        "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*"
    ],
    "severity": "High"
}
References

Affected packages

Bitnami / apache

Package

Name
apache
Purl
pkg:bitnami/apache

Severity

  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
2.4.0
Fixed
2.4.68

Database specific

source
"https://github.com/bitnami/vulndb/tree/main/data/apache/BIT-apache-2026-34355.json"