Not rated
CVE-2026-28780 Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server
Description
Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache HTTP Server 2.4 | earliest → 2.4.66 | No fix stated |
| Red Hat JBoss Core Services on RHEL 7 Server | Versions not published | |
| Red Hat JBoss Core Services on RHEL 8 | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 10) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 8) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 9) | Versions not published | |
| Red Hat JBoss Core Services 2.4.62.SP4 | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published |
Show the 20 other branches Hide the 20 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux AppStream E4S (v.8.8) | Versions not published | |
| Red Hat Enterprise Linux AppStream TUS (v.8.8) | Versions not published | |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Versions not published | |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) | Versions not published | |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | Versions not published | |
| JBoss Core Services for RHEL 8 | Versions not published | |
| JBoss Core Services on RHEL 7 | Versions not published | |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 8 8100020260519200905.489197 | earliest → < 8100020260519200905.489197e6 | 8100020260519200905.489197e6 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 8040020260702193120.522 | earliest → < 8040020260702193120.522a0ee4 | 8040020260702193120.522a0ee4 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 8040020260702193120.522 | earliest → < 8040020260702193120.522a0ee4 | 8040020260702193120.522a0ee4 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 8060020260702195216 | earliest → < 8060020260702195216.ad008a3a | 8060020260702195216.ad008a3a |
| Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On 8060020260702195216 | earliest → < 8060020260702195216.ad008a3a | 8060020260702195216.ad008a3a |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service 8080020260702200145.63 | earliest → < 8080020260702200145.63b34585 | 8080020260702200145.63b34585 |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 8080020260702200145.63 | earliest → < 8080020260702200145.63b34585 | 8080020260702200145.63b34585 |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux 10.0 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 9.6 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | Versions not published |
References
- httpd.apache.org httpd.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache HTTP Server
The 139 CVEs of Apache HTTP Server →
CVE-2026-63686
A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all…
Not rated
CVE-2026-93546
Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write…
Not rated
CVE-2026-79768
Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when…
Not rated
CVE-2026-73637
Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows…
Not rated