Vulnerability-Lookup

ubuntu-cve-2026-33857

Vulnerability from osv_ubuntu

Published

2026-05-05 00:00

Modified

2026-06-08 12:18

Summary

Details

Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.

Severity

5.3 (Medium)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2026-33857	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-33857	REPORT
	https://ubuntu.com/security/notices/USN-8239-1	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "apache2",
            "binary_version": "2.4.7-1ubuntu4.22+esm13"
          },
          {
            "binary_name": "apache2-bin",
            "binary_version": "2.4.7-1ubuntu4.22+esm13"
          },
          {
            "binary_name": "apache2-data",
            "binary_version": "2.4.7-1ubuntu4.22+esm13"
          },
          {
            "binary_name": "apache2-mpm-event",
            "binary_version": "2.4.7-1ubuntu4.22+esm13"
          },
          {
            "binary_name": "apache2-mpm-itk",
            "binary_version": "2.4.7-1ubuntu4.22+esm13"
          },
          {
            "binary_name": "apache2-mpm-prefork",
            "binary_version": "2.4.7-1ubuntu4.22+esm13"
          },
          {
            "binary_name": "apache2-mpm-worker",
            "binary_version": "2.4.7-1ubuntu4.22+esm13"
          },
          {
            "binary_name": "apache2-suexec",
            "binary_version": "2.4.7-1ubuntu4.22+esm13"
          },
          {
            "binary_name": "apache2-suexec-custom",
            "binary_version": "2.4.7-1ubuntu4.22+esm13"
          },
          {
            "binary_name": "apache2-suexec-pristine",
            "binary_version": "2.4.7-1ubuntu4.22+esm13"
          },
          {
            "binary_name": "apache2-utils",
            "binary_version": "2.4.7-1ubuntu4.22+esm13"
          },
          {
            "binary_name": "apache2.2-bin",
            "binary_version": "2.4.7-1ubuntu4.22+esm13"
          },
          {
            "binary_name": "libapache2-mod-macro",
            "binary_version": "1:2.4.7-1ubuntu4.22+esm13"
          },
          {
            "binary_name": "libapache2-mod-proxy-html",
            "binary_version": "1:2.4.7-1ubuntu4.22+esm13"
          }
        ],
        "priority_reason": "Apache httpd developers have rated this to be a low-severity issue"
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "apache2",
        "purl": "pkg:deb/ubuntu/apache2@2.4.7-1ubuntu4.22+esm13?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.4.6-2ubuntu2",
        "2.4.6-2ubuntu3",
        "2.4.6-2ubuntu4",
        "2.4.7-1ubuntu1",
        "2.4.7-1ubuntu2",
        "2.4.7-1ubuntu3",
        "2.4.7-1ubuntu4",
        "2.4.7-1ubuntu4.1",
        "2.4.7-1ubuntu4.4",
        "2.4.7-1ubuntu4.5",
        "2.4.7-1ubuntu4.6",
        "2.4.7-1ubuntu4.7",
        "2.4.7-1ubuntu4.8",
        "2.4.7-1ubuntu4.9",
        "2.4.7-1ubuntu4.10",
        "2.4.7-1ubuntu4.11",
        "2.4.7-1ubuntu4.13",
        "2.4.7-1ubuntu4.15",
        "2.4.7-1ubuntu4.16",
        "2.4.7-1ubuntu4.17",
        "2.4.7-1ubuntu4.18",
        "2.4.7-1ubuntu4.19",
        "2.4.7-1ubuntu4.20",
        "2.4.7-1ubuntu4.21",
        "2.4.7-1ubuntu4.22",
        "2.4.7-1ubuntu4.22+esm1",
        "2.4.7-1ubuntu4.22+esm2",
        "2.4.7-1ubuntu4.22+esm3",
        "2.4.7-1ubuntu4.22+esm4",
        "2.4.7-1ubuntu4.22+esm5",
        "2.4.7-1ubuntu4.22+esm6",
        "2.4.7-1ubuntu4.22+esm8",
        "2.4.7-1ubuntu4.22+esm9",
        "2.4.7-1ubuntu4.22+esm10",
        "2.4.7-1ubuntu4.22+esm12",
        "2.4.7-1ubuntu4.22+esm13"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "apache2",
            "binary_version": "2.4.18-2ubuntu3.17+esm18"
          },
          {
            "binary_name": "apache2-bin",
            "binary_version": "2.4.18-2ubuntu3.17+esm18"
          },
          {
            "binary_name": "apache2-data",
            "binary_version": "2.4.18-2ubuntu3.17+esm18"
          },
          {
            "binary_name": "apache2-suexec-custom",
            "binary_version": "2.4.18-2ubuntu3.17+esm18"
          },
          {
            "binary_name": "apache2-suexec-pristine",
            "binary_version": "2.4.18-2ubuntu3.17+esm18"
          },
          {
            "binary_name": "apache2-utils",
            "binary_version": "2.4.18-2ubuntu3.17+esm18"
          }
        ],
        "priority_reason": "Apache httpd developers have rated this to be a low-severity issue"
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "apache2",
        "purl": "pkg:deb/ubuntu/apache2@2.4.18-2ubuntu3.17+esm18?arch=source\u0026distro=esm-infra-legacy/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.4.12-2ubuntu2",
        "2.4.17-1ubuntu1",
        "2.4.17-2ubuntu1",
        "2.4.17-3ubuntu1",
        "2.4.18-1ubuntu1",
        "2.4.18-2ubuntu1",
        "2.4.18-2ubuntu2",
        "2.4.18-2ubuntu3",
        "2.4.18-2ubuntu3.1",
        "2.4.18-2ubuntu3.2",
        "2.4.18-2ubuntu3.3",
        "2.4.18-2ubuntu3.4",
        "2.4.18-2ubuntu3.5",
        "2.4.18-2ubuntu3.7",
        "2.4.18-2ubuntu3.8",
        "2.4.18-2ubuntu3.9",
        "2.4.18-2ubuntu3.10",
        "2.4.18-2ubuntu3.12",
        "2.4.18-2ubuntu3.13",
        "2.4.18-2ubuntu3.14",
        "2.4.18-2ubuntu3.15",
        "2.4.18-2ubuntu3.17",
        "2.4.18-2ubuntu3.17+esm1",
        "2.4.18-2ubuntu3.17+esm2",
        "2.4.18-2ubuntu3.17+esm3",
        "2.4.18-2ubuntu3.17+esm4",
        "2.4.18-2ubuntu3.17+esm5",
        "2.4.18-2ubuntu3.17+esm6",
        "2.4.18-2ubuntu3.17+esm7",
        "2.4.18-2ubuntu3.17+esm8",
        "2.4.18-2ubuntu3.17+esm9",
        "2.4.18-2ubuntu3.17+esm10",
        "2.4.18-2ubuntu3.17+esm11",
        "2.4.18-2ubuntu3.17+esm12",
        "2.4.18-2ubuntu3.17+esm13",
        "2.4.18-2ubuntu3.17+esm14",
        "2.4.18-2ubuntu3.17+esm16",
        "2.4.18-2ubuntu3.17+esm17",
        "2.4.18-2ubuntu3.17+esm18"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "apache2",
            "binary_version": "2.4.29-1ubuntu4.27+esm9"
          },
          {
            "binary_name": "apache2-bin",
            "binary_version": "2.4.29-1ubuntu4.27+esm9"
          },
          {
            "binary_name": "apache2-data",
            "binary_version": "2.4.29-1ubuntu4.27+esm9"
          },
          {
            "binary_name": "apache2-suexec-custom",
            "binary_version": "2.4.29-1ubuntu4.27+esm9"
          },
          {
            "binary_name": "apache2-suexec-pristine",
            "binary_version": "2.4.29-1ubuntu4.27+esm9"
          },
          {
            "binary_name": "apache2-utils",
            "binary_version": "2.4.29-1ubuntu4.27+esm9"
          }
        ],
        "priority_reason": "Apache httpd developers have rated this to be a low-severity issue"
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "apache2",
        "purl": "pkg:deb/ubuntu/apache2@2.4.29-1ubuntu4.27+esm9?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.4.27-2ubuntu3",
        "2.4.29-1ubuntu1",
        "2.4.29-1ubuntu2",
        "2.4.29-1ubuntu3",
        "2.4.29-1ubuntu4",
        "2.4.29-1ubuntu4.1",
        "2.4.29-1ubuntu4.2",
        "2.4.29-1ubuntu4.3",
        "2.4.29-1ubuntu4.4",
        "2.4.29-1ubuntu4.5",
        "2.4.29-1ubuntu4.6",
        "2.4.29-1ubuntu4.7",
        "2.4.29-1ubuntu4.8",
        "2.4.29-1ubuntu4.10",
        "2.4.29-1ubuntu4.11",
        "2.4.29-1ubuntu4.12",
        "2.4.29-1ubuntu4.13",
        "2.4.29-1ubuntu4.14",
        "2.4.29-1ubuntu4.16",
        "2.4.29-1ubuntu4.17",
        "2.4.29-1ubuntu4.18",
        "2.4.29-1ubuntu4.19",
        "2.4.29-1ubuntu4.20",
        "2.4.29-1ubuntu4.21",
        "2.4.29-1ubuntu4.22",
        "2.4.29-1ubuntu4.23",
        "2.4.29-1ubuntu4.24",
        "2.4.29-1ubuntu4.25",
        "2.4.29-1ubuntu4.26",
        "2.4.29-1ubuntu4.27",
        "2.4.29-1ubuntu4.27+esm1",
        "2.4.29-1ubuntu4.27+esm2",
        "2.4.29-1ubuntu4.27+esm3",
        "2.4.29-1ubuntu4.27+esm4",
        "2.4.29-1ubuntu4.27+esm6",
        "2.4.29-1ubuntu4.27+esm7",
        "2.4.29-1ubuntu4.27+esm8",
        "2.4.29-1ubuntu4.27+esm9"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "apache2",
            "binary_version": "2.4.41-4ubuntu3.23+esm4"
          },
          {
            "binary_name": "apache2-bin",
            "binary_version": "2.4.41-4ubuntu3.23+esm4"
          },
          {
            "binary_name": "apache2-data",
            "binary_version": "2.4.41-4ubuntu3.23+esm4"
          },
          {
            "binary_name": "apache2-suexec-custom",
            "binary_version": "2.4.41-4ubuntu3.23+esm4"
          },
          {
            "binary_name": "apache2-suexec-pristine",
            "binary_version": "2.4.41-4ubuntu3.23+esm4"
          },
          {
            "binary_name": "apache2-utils",
            "binary_version": "2.4.41-4ubuntu3.23+esm4"
          },
          {
            "binary_name": "libapache2-mod-md",
            "binary_version": "2.4.41-4ubuntu3.23+esm4"
          },
          {
            "binary_name": "libapache2-mod-proxy-uwsgi",
            "binary_version": "2.4.41-4ubuntu3.23+esm4"
          }
        ],
        "priority_reason": "Apache httpd developers have rated this to be a low-severity issue"
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "apache2",
        "purl": "pkg:deb/ubuntu/apache2@2.4.41-4ubuntu3.23+esm4?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.4.41-1ubuntu1",
        "2.4.41-4ubuntu1",
        "2.4.41-4ubuntu2",
        "2.4.41-4ubuntu3",
        "2.4.41-4ubuntu3.1",
        "2.4.41-4ubuntu3.3",
        "2.4.41-4ubuntu3.4",
        "2.4.41-4ubuntu3.5",
        "2.4.41-4ubuntu3.6",
        "2.4.41-4ubuntu3.7",
        "2.4.41-4ubuntu3.8",
        "2.4.41-4ubuntu3.9",
        "2.4.41-4ubuntu3.10",
        "2.4.41-4ubuntu3.11",
        "2.4.41-4ubuntu3.12",
        "2.4.41-4ubuntu3.13",
        "2.4.41-4ubuntu3.14",
        "2.4.41-4ubuntu3.15",
        "2.4.41-4ubuntu3.16",
        "2.4.41-4ubuntu3.17",
        "2.4.41-4ubuntu3.19",
        "2.4.41-4ubuntu3.20",
        "2.4.41-4ubuntu3.21",
        "2.4.41-4ubuntu3.23",
        "2.4.41-4ubuntu3.23+esm2",
        "2.4.41-4ubuntu3.23+esm3",
        "2.4.41-4ubuntu3.23+esm4"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apache2",
            "binary_version": "2.4.52-1ubuntu4.20"
          },
          {
            "binary_name": "apache2-bin",
            "binary_version": "2.4.52-1ubuntu4.20"
          },
          {
            "binary_name": "apache2-data",
            "binary_version": "2.4.52-1ubuntu4.20"
          },
          {
            "binary_name": "apache2-suexec-custom",
            "binary_version": "2.4.52-1ubuntu4.20"
          },
          {
            "binary_name": "apache2-suexec-pristine",
            "binary_version": "2.4.52-1ubuntu4.20"
          },
          {
            "binary_name": "apache2-utils",
            "binary_version": "2.4.52-1ubuntu4.20"
          },
          {
            "binary_name": "libapache2-mod-md",
            "binary_version": "2.4.52-1ubuntu4.20"
          },
          {
            "binary_name": "libapache2-mod-proxy-uwsgi",
            "binary_version": "2.4.52-1ubuntu4.20"
          }
        ],
        "priority_reason": "Apache httpd developers have rated this to be a low-severity issue"
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "apache2",
        "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.20?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.52-1ubuntu4.20"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.4.48-3.1ubuntu3",
        "2.4.48-3.1ubuntu4",
        "2.4.51-2ubuntu1",
        "2.4.52-1ubuntu1",
        "2.4.52-1ubuntu2",
        "2.4.52-1ubuntu4",
        "2.4.52-1ubuntu4.1",
        "2.4.52-1ubuntu4.2",
        "2.4.52-1ubuntu4.3",
        "2.4.52-1ubuntu4.4",
        "2.4.52-1ubuntu4.5",
        "2.4.52-1ubuntu4.6",
        "2.4.52-1ubuntu4.7",
        "2.4.52-1ubuntu4.8",
        "2.4.52-1ubuntu4.9",
        "2.4.52-1ubuntu4.10",
        "2.4.52-1ubuntu4.11",
        "2.4.52-1ubuntu4.12",
        "2.4.52-1ubuntu4.13",
        "2.4.52-1ubuntu4.14",
        "2.4.52-1ubuntu4.15",
        "2.4.52-1ubuntu4.16",
        "2.4.52-1ubuntu4.18",
        "2.4.52-1ubuntu4.19"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apache2",
            "binary_version": "2.4.58-1ubuntu8.12"
          },
          {
            "binary_name": "apache2-bin",
            "binary_version": "2.4.58-1ubuntu8.12"
          },
          {
            "binary_name": "apache2-data",
            "binary_version": "2.4.58-1ubuntu8.12"
          },
          {
            "binary_name": "apache2-suexec-custom",
            "binary_version": "2.4.58-1ubuntu8.12"
          },
          {
            "binary_name": "apache2-suexec-pristine",
            "binary_version": "2.4.58-1ubuntu8.12"
          },
          {
            "binary_name": "apache2-utils",
            "binary_version": "2.4.58-1ubuntu8.12"
          },
          {
            "binary_name": "libapache2-mod-md",
            "binary_version": "2.4.58-1ubuntu8.12"
          },
          {
            "binary_name": "libapache2-mod-proxy-uwsgi",
            "binary_version": "2.4.58-1ubuntu8.12"
          }
        ],
        "priority_reason": "Apache httpd developers have rated this to be a low-severity issue"
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "apache2",
        "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu8.12?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-1ubuntu8.12"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.4.57-2ubuntu2",
        "2.4.57-2ubuntu3",
        "2.4.58-1ubuntu1",
        "2.4.58-1ubuntu2",
        "2.4.58-1ubuntu6",
        "2.4.58-1ubuntu7",
        "2.4.58-1ubuntu8",
        "2.4.58-1ubuntu8.1",
        "2.4.58-1ubuntu8.2",
        "2.4.58-1ubuntu8.3",
        "2.4.58-1ubuntu8.4",
        "2.4.58-1ubuntu8.5",
        "2.4.58-1ubuntu8.6",
        "2.4.58-1ubuntu8.7",
        "2.4.58-1ubuntu8.8",
        "2.4.58-1ubuntu8.10",
        "2.4.58-1ubuntu8.11"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apache2",
            "binary_version": "2.4.64-1ubuntu3.4"
          },
          {
            "binary_name": "apache2-bin",
            "binary_version": "2.4.64-1ubuntu3.4"
          },
          {
            "binary_name": "apache2-data",
            "binary_version": "2.4.64-1ubuntu3.4"
          },
          {
            "binary_name": "apache2-suexec-custom",
            "binary_version": "2.4.64-1ubuntu3.4"
          },
          {
            "binary_name": "apache2-suexec-pristine",
            "binary_version": "2.4.64-1ubuntu3.4"
          },
          {
            "binary_name": "apache2-utils",
            "binary_version": "2.4.64-1ubuntu3.4"
          }
        ],
        "priority_reason": "Apache httpd developers have rated this to be a low-severity issue"
      },
      "package": {
        "ecosystem": "Ubuntu:25.10",
        "name": "apache2",
        "purl": "pkg:deb/ubuntu/apache2@2.4.64-1ubuntu3.4?arch=source\u0026distro=questing"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.64-1ubuntu3.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.4.63-1ubuntu1",
        "2.4.63-1ubuntu3",
        "2.4.64-1ubuntu2",
        "2.4.64-1ubuntu3",
        "2.4.64-1ubuntu3.2",
        "2.4.64-1ubuntu3.3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apache2",
            "binary_version": "2.4.66-2ubuntu2.1"
          },
          {
            "binary_name": "apache2-bin",
            "binary_version": "2.4.66-2ubuntu2.1"
          },
          {
            "binary_name": "apache2-data",
            "binary_version": "2.4.66-2ubuntu2.1"
          },
          {
            "binary_name": "apache2-suexec-custom",
            "binary_version": "2.4.66-2ubuntu2.1"
          },
          {
            "binary_name": "apache2-suexec-pristine",
            "binary_version": "2.4.66-2ubuntu2.1"
          },
          {
            "binary_name": "apache2-utils",
            "binary_version": "2.4.66-2ubuntu2.1"
          }
        ],
        "priority_reason": "Apache httpd developers have rated this to be a low-severity issue"
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "apache2",
        "purl": "pkg:deb/ubuntu/apache2@2.4.66-2ubuntu2.1?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.66-2ubuntu2.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.4.64-1ubuntu3",
        "2.4.65-3ubuntu1",
        "2.4.66-2ubuntu1",
        "2.4.66-2ubuntu2"
      ]
    }
  ],
  "aliases": [],
  "details": "Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue.",
  "id": "UBUNTU-CVE-2026-33857",
  "modified": "2026-06-08T12:18:55Z",
  "published": "2026-05-05T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-33857"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33857"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8239-1"
    }
  ],
  "related": [
    "USN-8239-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-33857"
  ]
}

CVE-2026-33857 (GCVE-0-2026-33857)

Vulnerability from cvelistv5 – Published: 2026-05-04 13:07 – Updated: 2026-05-04 17:32

Title

Apache HTTP Server: Off-by-one OOB reads in AJP getter functions

Summary

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-125 - Out-of-bounds Read

Assigner

apache

References

2 references

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory
http://www.openwall.com/lists/oss-security/2026/0…

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 0 , ≤ 2.4.66 (semver)

Credits

Elhanan Haenel

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-33857",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-04T13:58:58.653462Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-04T13:59:45.381Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-05-04T17:32:50.362Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/05/04/15"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.4.66",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Elhanan Haenel"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eOut-of-bounds Read vulnerability in mod_proxy_ajp of \n\nApache HTTP Server.\u003c/p\u003e\u003cp\u003eThis issue affects Apache HTTP Server: through 2.4.66.\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 2.4.67, which fixes the issue.\u003c/p\u003e"
            }
          ],
          "value": "Out-of-bounds Read vulnerability in mod_proxy_ajp of \n\nApache HTTP Server.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "low"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-04T13:07:30.753Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-03-20T12:00:00.000Z",
          "value": "Reported"
        },
        {
          "lang": "en",
          "time": "2026-05-04T12:00:00.000Z",
          "value": "fixed by r1933341 in 2.4.x"
        }
      ],
      "title": "Apache HTTP Server: Off-by-one OOB reads in AJP getter functions",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2026-33857",
    "datePublished": "2026-05-04T13:07:30.753Z",
    "dateReserved": "2026-03-24T09:20:11.213Z",
    "dateUpdated": "2026-05-04T17:32:50.362Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

usn-8239-1

Vulnerability from osv_ubuntu

Published

2026-05-06 19:55

Modified

2026-06-30 15:55

Summary

apache2 vulnerabilities

Details

Bartlomiej Dmitruk and Stanislaw Strzalkowski discovered that Apache HTTP Server incorrectly handled certain memory operations when using the HTTP/2 protocol. A remote attacker could use this issue to cause Apache HTTP Server to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-23918)

It was discovered that the Apache HTTP Server mod_rewrite module incorrectly handled certain privileges. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2026-24072)

Andrew Lacambra, Elhanan Haenel, Tianshuo Han, and Tristan Madani discovered that the Apache HTTP Server mod_proxy_ajp module incorrectly handled certain AJP server messages. An attacker in control of a backend AJP server could use this issue to cause Apache HTTP Server to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-28780)

Pavel Kohout discovered that Apache HTTP Server did not properly limit resource allocation in mod_md when processing OCSP response data. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-29168)

Pavel Kohout discovered that the Apache HTTP Server incorrectly handled certain memory operations in mod_dav_lock. A remote attacker could possibly use this issue to cause Apache HTTP Server to crash, resulting in a denial of service. (CVE-2026-29169)

Nitescu Lucian discovered that Apache HTTP Server had a timing attack vulnerability in mod_auth_digest. A remote attacker could possibly use this issue to bypass Digest authentication. (CVE-2026-33006)

Pavel Kohout and Arkadi Vainbrand discovered that Apache HTTP Server incorrectly handled certain memory operations in mod_authn_socache. A remote attacker could possibly use this issue to cause Apache HTTP Server to crash, resulting in a denial of service. (CVE-2026-33007)

Haruki Oyama, Merih Mengisteab, and Dawit Jeong discovered that Apache HTTP Server had an HTTP response splitting vulnerability in multiple modules when used with untrusted or compromised backend servers. An attacker could possibly use this issue to inject arbitrary HTTP headers. (CVE-2026-33523)

Elhanan Haenel discovered that Apache HTTP Server incorrectly handled certain memory operations in mod_proxy_ajp. A remote attacker could possibly use this issue to cause Apache HTTP Server to crash, resulting in a denial of service. (CVE-2026-33857)

Tianshuo Han and Jérôme Djouder discovered that Apache HTTP Server incorrectly handled certain string operations in mod_proxy_ajp. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-34032)

Elhanan Haenel discovered that Apache HTTP Server incorrectly handled certain memory operations in mod_proxy_ajp. A remote attacker could use this issue to cause Apache HTTP Server to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2026-34059)

References

URL

Type

	https://ubuntu.com/security/notices/USN-8239-1	ADVISORY
	https://ubuntu.com/security/CVE-2026-23918	REPORT
	https://ubuntu.com/security/CVE-2026-24072	REPORT
	https://ubuntu.com/security/CVE-2026-28780	REPORT
	https://ubuntu.com/security/CVE-2026-29168	REPORT
	https://ubuntu.com/security/CVE-2026-29169	REPORT
	https://ubuntu.com/security/CVE-2026-33006	REPORT
	https://ubuntu.com/security/CVE-2026-33007	REPORT
	https://ubuntu.com/security/CVE-2026-33523	REPORT
	https://ubuntu.com/security/CVE-2026-33857	REPORT
	https://ubuntu.com/security/CVE-2026-34032	REPORT
	https://ubuntu.com/security/CVE-2026-34059	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-24072",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-28780",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-29168",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-29169",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-33006",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-33007",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-33523",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-33857",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-34032",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-34059",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apache2",
            "binary_version": "2.4.52-1ubuntu4.20"
          },
          {
            "binary_name": "apache2-bin",
            "binary_version": "2.4.52-1ubuntu4.20"
          },
          {
            "binary_name": "apache2-data",
            "binary_version": "2.4.52-1ubuntu4.20"
          },
          {
            "binary_name": "apache2-suexec-custom",
            "binary_version": "2.4.52-1ubuntu4.20"
          },
          {
            "binary_name": "apache2-suexec-pristine",
            "binary_version": "2.4.52-1ubuntu4.20"
          },
          {
            "binary_name": "apache2-utils",
            "binary_version": "2.4.52-1ubuntu4.20"
          },
          {
            "binary_name": "libapache2-mod-md",
            "binary_version": "2.4.52-1ubuntu4.20"
          },
          {
            "binary_name": "libapache2-mod-proxy-uwsgi",
            "binary_version": "2.4.52-1ubuntu4.20"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "apache2",
        "purl": "pkg:deb/ubuntu/apache2@2.4.52-1ubuntu4.20?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.52-1ubuntu4.20"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.4.48-3.1ubuntu3",
        "2.4.48-3.1ubuntu4",
        "2.4.51-2ubuntu1",
        "2.4.52-1ubuntu1",
        "2.4.52-1ubuntu2",
        "2.4.52-1ubuntu4",
        "2.4.52-1ubuntu4.1",
        "2.4.52-1ubuntu4.2",
        "2.4.52-1ubuntu4.3",
        "2.4.52-1ubuntu4.4",
        "2.4.52-1ubuntu4.5",
        "2.4.52-1ubuntu4.6",
        "2.4.52-1ubuntu4.7",
        "2.4.52-1ubuntu4.8",
        "2.4.52-1ubuntu4.9",
        "2.4.52-1ubuntu4.10",
        "2.4.52-1ubuntu4.11",
        "2.4.52-1ubuntu4.12",
        "2.4.52-1ubuntu4.13",
        "2.4.52-1ubuntu4.14",
        "2.4.52-1ubuntu4.15",
        "2.4.52-1ubuntu4.16",
        "2.4.52-1ubuntu4.18",
        "2.4.52-1ubuntu4.19"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-24072",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-28780",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-29168",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-29169",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-33006",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-33007",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-33523",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-33857",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-34032",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-34059",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:24.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apache2",
            "binary_version": "2.4.58-1ubuntu8.12"
          },
          {
            "binary_name": "apache2-bin",
            "binary_version": "2.4.58-1ubuntu8.12"
          },
          {
            "binary_name": "apache2-data",
            "binary_version": "2.4.58-1ubuntu8.12"
          },
          {
            "binary_name": "apache2-suexec-custom",
            "binary_version": "2.4.58-1ubuntu8.12"
          },
          {
            "binary_name": "apache2-suexec-pristine",
            "binary_version": "2.4.58-1ubuntu8.12"
          },
          {
            "binary_name": "apache2-utils",
            "binary_version": "2.4.58-1ubuntu8.12"
          },
          {
            "binary_name": "libapache2-mod-md",
            "binary_version": "2.4.58-1ubuntu8.12"
          },
          {
            "binary_name": "libapache2-mod-proxy-uwsgi",
            "binary_version": "2.4.58-1ubuntu8.12"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "apache2",
        "purl": "pkg:deb/ubuntu/apache2@2.4.58-1ubuntu8.12?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-1ubuntu8.12"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.4.57-2ubuntu2",
        "2.4.57-2ubuntu3",
        "2.4.58-1ubuntu1",
        "2.4.58-1ubuntu2",
        "2.4.58-1ubuntu6",
        "2.4.58-1ubuntu7",
        "2.4.58-1ubuntu8",
        "2.4.58-1ubuntu8.1",
        "2.4.58-1ubuntu8.2",
        "2.4.58-1ubuntu8.3",
        "2.4.58-1ubuntu8.4",
        "2.4.58-1ubuntu8.5",
        "2.4.58-1ubuntu8.6",
        "2.4.58-1ubuntu8.7",
        "2.4.58-1ubuntu8.8",
        "2.4.58-1ubuntu8.10",
        "2.4.58-1ubuntu8.11"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-24072",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-28780",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-29168",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-29169",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-33006",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-33007",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-33523",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-33857",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-34032",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-34059",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:25.10"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apache2",
            "binary_version": "2.4.64-1ubuntu3.4"
          },
          {
            "binary_name": "apache2-bin",
            "binary_version": "2.4.64-1ubuntu3.4"
          },
          {
            "binary_name": "apache2-data",
            "binary_version": "2.4.64-1ubuntu3.4"
          },
          {
            "binary_name": "apache2-suexec-custom",
            "binary_version": "2.4.64-1ubuntu3.4"
          },
          {
            "binary_name": "apache2-suexec-pristine",
            "binary_version": "2.4.64-1ubuntu3.4"
          },
          {
            "binary_name": "apache2-utils",
            "binary_version": "2.4.64-1ubuntu3.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:25.10",
        "name": "apache2",
        "purl": "pkg:deb/ubuntu/apache2@2.4.64-1ubuntu3.4?arch=source\u0026distro=questing"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.64-1ubuntu3.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.4.63-1ubuntu1",
        "2.4.63-1ubuntu3",
        "2.4.64-1ubuntu2",
        "2.4.64-1ubuntu3",
        "2.4.64-1ubuntu3.2",
        "2.4.64-1ubuntu3.3"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-23918",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-24072",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-28780",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-29168",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-29169",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-33006",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-33007",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-33523",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-33857",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-34032",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-34059",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:26.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "apache2",
            "binary_version": "2.4.66-2ubuntu2.1"
          },
          {
            "binary_name": "apache2-bin",
            "binary_version": "2.4.66-2ubuntu2.1"
          },
          {
            "binary_name": "apache2-data",
            "binary_version": "2.4.66-2ubuntu2.1"
          },
          {
            "binary_name": "apache2-suexec-custom",
            "binary_version": "2.4.66-2ubuntu2.1"
          },
          {
            "binary_name": "apache2-suexec-pristine",
            "binary_version": "2.4.66-2ubuntu2.1"
          },
          {
            "binary_name": "apache2-utils",
            "binary_version": "2.4.66-2ubuntu2.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "apache2",
        "purl": "pkg:deb/ubuntu/apache2@2.4.66-2ubuntu2.1?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.66-2ubuntu2.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.4.64-1ubuntu3",
        "2.4.65-3ubuntu1",
        "2.4.66-2ubuntu1",
        "2.4.66-2ubuntu2"
      ]
    }
  ],
  "aliases": [],
  "details": "Bartlomiej Dmitruk and Stanislaw Strzalkowski discovered that Apache\nHTTP Server incorrectly handled certain memory operations when using the\nHTTP/2 protocol. A remote attacker could use this issue to cause Apache\nHTTP Server to crash, resulting in a denial of service, or possibly execute\narbitrary code. This issue only affected Ubuntu 26.04 LTS.\n(CVE-2026-23918)\n\nIt was discovered that the Apache HTTP Server mod_rewrite module\nincorrectly handled certain privileges. A local attacker could possibly use\nthis issue to obtain sensitive information. (CVE-2026-24072)\n\nAndrew Lacambra, Elhanan Haenel, Tianshuo Han, and Tristan Madani\ndiscovered that the Apache HTTP Server mod_proxy_ajp module incorrectly\nhandled certain AJP server messages. An attacker in control of a backend\nAJP server could use this issue to cause Apache HTTP Server to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2026-28780)\n\nPavel Kohout discovered that Apache HTTP Server did not properly limit\nresource allocation in mod_md when processing OCSP response data. A\nremote attacker could possibly use this issue to cause a denial of\nservice. (CVE-2026-29168)\n\nPavel Kohout discovered that the Apache HTTP Server incorrectly handled\ncertain memory operations in mod_dav_lock. A remote attacker could possibly\nuse this issue to cause Apache HTTP Server to crash, resulting in a denial\nof service. (CVE-2026-29169)\n\nNitescu Lucian discovered that Apache HTTP Server had a timing attack\nvulnerability in mod_auth_digest. A remote attacker could possibly\nuse this issue to bypass Digest authentication. (CVE-2026-33006)\n\nPavel Kohout and Arkadi Vainbrand discovered that Apache HTTP Server\nincorrectly handled certain memory operations in mod_authn_socache. A\nremote attacker could possibly use this issue to cause Apache HTTP Server\nto crash, resulting in a denial of service. (CVE-2026-33007)\n\nHaruki Oyama, Merih Mengisteab, and Dawit Jeong discovered that\nApache HTTP Server had an HTTP response splitting vulnerability in\nmultiple modules when used with untrusted or compromised backend\nservers. An attacker could possibly use this issue to inject arbitrary\nHTTP headers. (CVE-2026-33523)\n\nElhanan Haenel discovered that Apache HTTP Server incorrectly handled\ncertain memory operations in mod_proxy_ajp. A remote attacker could\npossibly use this issue to cause Apache HTTP Server to crash, resulting in\na denial of service. (CVE-2026-33857)\n\nTianshuo Han and J\u00e9r\u00f4me Djouder discovered that Apache HTTP Server\nincorrectly handled certain string operations in mod_proxy_ajp. A remote\nattacker could possibly use this issue to obtain sensitive information.\n(CVE-2026-34032)\n\nElhanan Haenel discovered that Apache HTTP Server incorrectly handled\ncertain memory operations in mod_proxy_ajp. A remote attacker could use\nthis issue to cause Apache HTTP Server to crash, resulting in a denial of\nservice, or possibly obtain sensitive information. (CVE-2026-34059)",
  "id": "USN-8239-1",
  "modified": "2026-06-30T15:55:18Z",
  "published": "2026-05-06T19:55:12Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8239-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-23918"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-24072"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-28780"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-29168"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-29169"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-33006"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-33007"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-33523"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-33857"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-34032"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-34059"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "apache2 vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2026-23918",
    "UBUNTU-CVE-2026-24072",
    "UBUNTU-CVE-2026-28780",
    "UBUNTU-CVE-2026-29168",
    "UBUNTU-CVE-2026-29169",
    "UBUNTU-CVE-2026-33006",
    "UBUNTU-CVE-2026-33007",
    "UBUNTU-CVE-2026-33523",
    "UBUNTU-CVE-2026-33857",
    "UBUNTU-CVE-2026-34032",
    "UBUNTU-CVE-2026-34059"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

ubuntu-cve-2026-33857

Vulnerability from osv_ubuntu

CVE-2026-33857 (GCVE-0-2026-33857)

usn-8239-1

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature