Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2026-114459

Mod_qos: out-of-bounds reads in response-body substring matching

Description

A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering specifically crafted server responses, causing an Apache worker process to crash and resulting in a Denial of Service (DoS).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

pbuchbinder mod_qos

Default version status: unknown

  • 11.74affected
  • 11.76affected
  • 11.79affected

References