Finding #155 — CVE-2026-34355

Inventory item	apache-test2 2.4.37 (software, apache)
Title	CVE-2026-34355: A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to versi
Match	cpe / confidence high
Status	new
First seen	2026-06-11T07:39:49Z
Last updated	2026-06-11T07:39:49Z
CVE	CVE-2026-34355
CVSS	7.5 (HIGH) `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
Description	A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.
Source advisory	CVE-2026-34355: A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to versi A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue.
References	https://httpd.apache.org/security/vulnerabilities_24.html http://www.openwall.com/lists/oss-security/2026/06/08/6 https://access.redhat.com/errata/RHSA-2026:25042 https://access.redhat.com/errata/RHSA-2026:34109 https://access.redhat.com/errata/RHSA-2026:41906 https://access.redhat.com/errata/RHSA-2026:42828 https://access.redhat.com/errata/RHSA-2026:47046 https://access.redhat.com/errata/RHSA-2026:53371 https://access.redhat.com/errata/RHSA-2026:56868 https://access.redhat.com/errata/RHSA-2026:56869 https://access.redhat.com/errata/RHSA-2026:62165 https://access.redhat.com/errata/RHSA-2026:66323 https://access.redhat.com/errata/RHSA-2026:67152 https://access.redhat.com/security/cve/CVE-2026-34355 https://bugzilla.redhat.com/show_bug.cgi?id=2486414

Finding #155 — CVE-2026-34355

Update status