The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_22140 advisory.

    * httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020)

    * httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()     (CVE-2026-34059)

    * httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032)

    * httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857)

    * httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash (CVE-2026-33007)

    * Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-     based buffer overflow (CVE-2026-28780)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36373 advisory.

    The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

    Security Fix(es):

    * httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020)

    * httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()     (CVE-2026-34059)

    * httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032)

    * httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857)

    * httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash (CVE-2026-33007)

    * Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-     based buffer overflow (CVE-2026-28780)

    * httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1720 advisory.

    An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess     authors to read files with the privileges of the httpd user.

    Users are recommended to upgrade to version 2.4.67, which fixes this issue. (CVE-2026-24072)

    Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server.If mod_proxy_ajp connects     to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause     it to write 4 attacker controlled bytes after the end of a heap based buffer.

    This issue affects Apache HTTP Server: through 2.4.66.

    Users are recommended to upgrade to version 2.4.67, which fixes the issue. (CVE-2026-28780)

    Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's  mod_md via     OCSP response data.

    This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66.

    Users are recommended to upgrade to version 2.4.67, which fixes the issue. (CVE-2026-29168)

    A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker     to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.

    The only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version     1.2.0.

    Users are recommended to upgrade to version 2.4.66, which fixes this issue, or remove mod_dav_lock.
    (CVE-2026-29169)

    A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest     authentication by a remote attacker.

    Users are recommended to upgrade to version 2.4.67, which fixes this issue. (CVE-2026-33006)

    A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an     unauthenticated remote user to crash a child process in a caching forward proxy configuration.

    Users are recommended to upgrade to version 2.4.67, which fixes this issue. (CVE-2026-33007)

    HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised     backend servers.

    This issue affects Apache HTTP Server: from through 2.4.66.

    Users are recommended to upgrade to version 2.4.67, which fixes the issue. (CVE-2026-33523)

    Out-of-bounds Read vulnerability in mod_proxy_ajp of

    Apache HTTP Server.

    This issue affects Apache HTTP Server: through 2.4.66.

    Users are recommended to upgrade to version 2.4.67, which fixes the issue. (CVE-2026-33857)

    Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.

    This issue affects Apache HTTP Server: through 2.4.66.

    Users are recommended to upgrade to version 2.4.67, which fixes the issue. (CVE-2026-34032)

    Buffer Over-read vulnerability in Apache HTTP Server.

    This issue affects Apache HTTP Server: through 2.4.66.

    Users are recommended to upgrade to version 2.4.67, which fixes the issue. (CVE-2026-34059)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of httpd installed on the remote host is prior to 2.4.67-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3314 advisory.

    An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess     authors to read files with the privileges of the httpd user.

    Users are recommended to upgrade to version 2.4.67, which fixes this issue. (CVE-2026-24072)

    Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server.If mod_proxy_ajp connects     to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause     it to write 4 attacker controlled bytes after the end of a heap based buffer.

    This issue affects Apache HTTP Server: through 2.4.66.

    Users are recommended to upgrade to version 2.4.67, which fixes the issue. (CVE-2026-28780)

    Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's  mod_md via     OCSP response data.

    This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66.

    Users are recommended to upgrade to version 2.4.67, which fixes the issue. (CVE-2026-29168)

    A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker     to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.

    The only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version     1.2.0.

    Users are recommended to upgrade to version 2.4.66, which fixes this issue, or remove mod_dav_lock.
    (CVE-2026-29169)

    A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest     authentication by a remote attacker.

    Users are recommended to upgrade to version 2.4.67, which fixes this issue. (CVE-2026-33006)

    A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an     unauthenticated remote user to crash a child process in a caching forward proxy configuration.

    Users are recommended to upgrade to version 2.4.67, which fixes this issue. (CVE-2026-33007)

    HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised     backend servers.

    This issue affects Apache HTTP Server: from through 2.4.66.

    Users are recommended to upgrade to version 2.4.67, which fixes the issue. (CVE-2026-33523)

    Out-of-bounds Read vulnerability in mod_proxy_ajp of

    Apache HTTP Server.

    This issue affects Apache HTTP Server: through 2.4.66.

    Users are recommended to upgrade to version 2.4.67, which fixes the issue. (CVE-2026-33857)

    Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.

    This issue affects Apache HTTP Server: through 2.4.66.

    Users are recommended to upgrade to version 2.4.67, which fixes the issue. (CVE-2026-34032)

    Buffer Over-read vulnerability in Apache HTTP Server.

    This issue affects Apache HTTP Server: through 2.4.66.

    Users are recommended to upgrade to version 2.4.67, which fixes the issue. (CVE-2026-34059)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
353663	Rocky Linux 8 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-debugsource / httpd-devel / etc Multiple Vulnerabilities (crlsa-2026_22140)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/5/2026	high
325601	RHEL 8 : httpd:2.4 (RHSA-2026:36373)	Nessus	Red Hat Local Security Checks	7/8/2026	7/8/2026	high
316833	Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2026-1720)	Nessus	Amazon Linux Local Security Checks	5/26/2026	10/16/2026	high
316988	Amazon Linux 2 : httpd, --advisory ALAS2-2026-3314 (ALAS-2026-3314)	Nessus	Amazon Linux Local Security Checks	5/27/2026	10/16/2026	high

Detections

Analytics

Plugins Search

high

high

high

high