Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 14:06:33 +0000 CVE-2026-28780 — Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() https://db.gcve.eu/vuln/cve-2026-28780 <p><strong>Affected:</strong> Apache Software Foundation Apache HTTP Server, Red Hat JBoss Core Services for RHEL 8, Red Hat JBoss Core Services on RHEL 7, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On and 8 more</p> <p>Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer.</p> <p>This issue affects Apache HTTP Server: through 2.4.66.</p> <p>Users are recommended to upgrade to version 2.4.67, which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache HTTP Server, Red Hat JBoss Core Services for RHEL 8, Red Hat JBoss Core Services on RHEL 7, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On and 8 more</p> <p>Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer.</p> <p>This issue affects Apache HTTP Server: through 2.4.66.</p> <p>Users are recommended to upgrade to version 2.4.67, which fixes the issue.</p> https://db.gcve.eu/vuln/cve-2026-28780