PT-2026-47323 · Apache+3 · Apache Http Server+3

Bzimport · CVE-2026-44185 · Published 2026-04-27 · Updated 2026-07-28

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.67

Description A buffer over-read occurs during outbound OCSP (Online Certificate Status Protocol) requests sent to an attacker-controlled OCSP server. A buffer over-read is a condition where a system reads data past the end of the intended buffer, potentially exposing sensitive information from memory.

Recommendations Upgrade to version 2.4.68.

Fix

DoS

Buffer Over-read

Out of bounds Read

Weakness Enumeration

CWE-126

CWE-125

Related Identifiers

ALSA-2026:34109

ALSA-2026:41906

ALSA-2026:42828

BDU:2026-09763

BIT-APACHE-2026-44185

CVE-2026-44185

ECHO-0E26-F84C-025F

OPENSUSE-SU-2026:21235-1

RHSA-2026:25042

RHSA-2026:34109

SUSE-SU-2026:22564-1

SUSE-SU-2026:2686-1

SUSE-SU-2026:2717-1

SUSE-SU-2026:2735-1

SUSE-SU-2026:2759-1

USN-8516-1

USN-8571-1

Affected Products

Apache Http Server

Linuxmint

Red Os

Rocky Linux

References · 196

• https://ubuntu.com/security/CVE-2026-49975 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-33007 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:41906 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-42828.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:41906 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-41906.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:2759-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8571-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34032 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-29170 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44185 · Security Note
• https://ubuntu.com/security/CVE-2026-44185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43951 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-41906.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-33523 · Vendor Advisory