PT-2026-47325 · Apache+2 · Apache Http Server+2

Bartlomiej Dmitruk · CVE-2026-44631 · Publicado 2026-04-27 · Atualizado 2026-07-21

Positive Technologies (AI Summary) · Pt

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Nome do Software Vulnerável e Versões Afetadas Apache HTTP Server versões 2.4.0 até 2.4.67

Descrição Um problema de buffer underwrite ocorre ao utilizar expressões regulares manipuladas na configuração.

Recomendações Atualizar para a versão 2.4.68.

Correção

Enumeração de Fraquezas

CWE-124

Identificadores relacionados

ALSA-2026:34109

ALSA-2026:41906

ALSA-2026:42828

BDU:2026-09752

BIT-APACHE-2026-44631

CVE-2026-44631

ECHO-783E-A034-5304

OPENSUSE-SU-2026:21235-1

RHSA-2026:25042

RHSA-2026:34109

SUSE-SU-2026:22564-1

SUSE-SU-2026:2686-1

SUSE-SU-2026:2717-1

SUSE-SU-2026:2735-1

SUSE-SU-2026:2759-1

USN-8516-1

USN-8571-1

Produtos afetados

Apache Http Server

Linuxmint

Rocky Linux

Referências · 192

• https://suse.com/security/cve/CVE-2025-66200 · Nota
• https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-44631 · Nota
• https://access.redhat.com/security/cve/CVE-2026-44186 · Nota
• https://access.redhat.com/security/cve/CVE-2026-42535 · Nota
• https://bugzilla.suse.com/1214357 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2026:2759-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1267962 · Nota
• https://bugzilla.redhat.com/2486399 · Nota
• https://suse.com/security/cve/CVE-2026-33006 · Nota
• https://ubuntu.com/security/CVE-2026-44186 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2026-34355 · Nota
• https://suse.com/security/cve/CVE-2024-38474 · Nota
• https://errata.rockylinux.org/RLSA-2026:42828 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-34355 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-33523 · Aviso do Fabricante