CVE-2026-44185

Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP send_request

high · 7.3

Published Jun 8, 2026, 15:22 UTC

Description

Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue.

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.