CVE catalog

CVE-2026-114459

UBUNTU-CVE-2026-114459

[CVE catalog]

Severity
Unknown · CVSS 3.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.37% · Oct 27, 2026

A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering specifically crafted server responses, causing an Apache worker process to crash and resulting in a Denial of Service (DoS).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianmod-qos1411.76-3vulnerable
Debianmod-qos1411.76-4vulnerable
Debianmod-qos1411.76-5vulnerable
Debianmod-qos1411.76-6vulnerable
Debianmod-qos1411.77-1vulnerable
Debianmod-qos1411.78-1vulnerable
Debianmod-qos1411.79-1vulnerable
Ubuntumod-qos26.1011.77-1vulnerable
Ubuntumod-qos26.1011.78-1vulnerable
Ubuntumod-qos26.1011.79-1vulnerable
Ubuntumod-qos26.1011.79-1build1vulnerable
Ubuntumod-qos26.0411.76-4vulnerable
Ubuntumod-qos26.0411.76-5vulnerable
Ubuntumod-qos26.0411.76-6vulnerable
Ubuntumod-qos26.0411.77-1vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]