CVE-2026-114459
Mod_qos: out-of-bounds reads in response-body substring matching
- State
- Published
- Severity
- 3.7 Low
- Published
- Oct 22, 2026
- Updated
- Oct 26, 2026
- Reserved
- Oct 21, 2026
Description
A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering specifically crafted server responses, causing an Apache worker process to crash and resulting in a Denial of Service (DoS).
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.7 Low | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L | fedora |
Weaknesses
- CWE-125 Out-of-bounds Read
Affected Products
| Product | Versions |
|---|---|
mod_qospbuchbinder |
|
References
- https://access.redhat.com/security/cve/CVE-2026-114459vdb-entry
- RHBZ#2558397issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.