CVE-2026-33857
published 2026-05-04CVE-2026-33857: Out-of-bounds Read vulnerability in mod_proxy_ajp of Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to…
medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
Out-of-bounds Read vulnerability in mod_proxy_ajp of
Apache HTTP Server.
This issue affects Apache HTTP Server: through 2.4.66.
Users are recommended to upgrade to version 2.4.67, which fixes the issue.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | http_server | < 2.4.67 | 2.4.67 |
| apache | httpd | — | — |
| apache_software_foundation | apache_http_server | <= 2.4.66 | — |
| httpd_2.4 | httpd | — | — |
| ubuntu | apache2 | — | — |