CVE-2026-114459

Published: Oct 22, 2026Modified: Oct 22, 2026

3.7

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 2.2 / Impact: 1.4

Source: patrick@puiterwijk.org (Secondary)

Description

A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering specifically crafted server responses, causing an Apache worker process to crash and resulting in a Denial of Service (DoS).

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://access.redhat.com/security/cve/CVE-2026-114459

Source: patrick@puiterwijk.org

https://bugzilla.redhat.com/show_bug.cgi?id=2558397

Source: patrick@puiterwijk.org

Timeline

No history available yet.