Apache HTTP Server buffer error vulnerability

Apache HTTP Server versions 2.4.0–2.4.67 have a buffer error from out-of-bounds reading in mod_headers, mod_mime, and response languages.

Reporter	Title	Published	Views	Family All 228
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase	25 Aug 202609:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities due to the included Apache HTTP Server	16 Jun 202614:00	–	ibm
IBM Security Bulletins	Security Bulletin: Due to IBM Tivoli Monitoring, IBM Cloud Pak System is affected by multiple vulnerabilities.	2 Oct 202617:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM HTTP Server used by IBM Rational ClearQuest	23 Jul 202619:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in xorg-x11-server, mod_http2, httpd, openssl, openssl-fips-provider, glibc, libxml2, kernel, sssd, krb5, expat, rsyslog, apr-util libraries affect Power HMC.	29 Oct 202610:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities within IBM HTTP Server, affect IBM Tivoli Monitoring.	21 Jul 202617:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server	23 Jun 202616:13	–	ibm
FreeBSD	Apache httpd -- Multiple vulnerabilities	8 Jun 202600:00	–	freebsd
attackerkb	CVE-2026-43951	8 Jun 202615:16	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2026-1880)	22 Jun 202600:00	–	nessus