Apache HTTP Server: mod_proxy_html buffer overflow
A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-34355US | — | — | ||
A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend.
Users are recommended to upgrade to version 2.4.68, which fix… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2026/06/08/6DISCUSSION
- https://access.redhat.com/errata/RHSA-2026:25042WEB
- https://access.redhat.com/errata/RHSA-2026:34109WEB
- https://access.redhat.com/errata/RHSA-2026:41906WEB
- https://access.redhat.com/errata/RHSA-2026:42828WEB
- https://access.redhat.com/errata/RHSA-2026:47046WEB
- https://access.redhat.com/errata/RHSA-2026:53371WEB
- https://access.redhat.com/errata/RHSA-2026:56868WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan