Approved changes feed: RSS · Atom
cpe:2.3:a:pbuchbinder:mod_qos:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Pbuchbinder (83130c9d-2768-59e7-916c-7135452b1cfb) |
|---|---|
| Product | Mod Qos (396e80e4-a676-57ce-a34b-cc6537ef74a6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-114457 |
vulnerable | 2026-11-03 10:15:53.490081 |
Mod_qos: missing nul termination in json value escaping permits out-of-bounds reads
LOW (3.7)
A flaw was found in mod_qos. An unauthenticated remote attacker could cause a Denial of Service (DoS) by sending a specially crafted JSON request when JSON body filtering is enabled. Due to improper string termination during the processing of percent-encoded input, the module reads past allocated memory boundaries, which can cause an Apache worker process to crash.
Published: 2026-10-22T06:37:03.333Z
Updated: 2026-10-26T19:38:30.961Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-114459 |
vulnerable | 2026-11-03 10:15:53.472572 |
Mod_qos: out-of-bounds reads in response-body substring matching
LOW (3.7)
A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenticated remote attacker can exploit this vulnerability by triggering specifically crafted server responses, causing an Apache worker process to crash and resulting in a Denial of Service (DoS).
Published: 2026-10-22T06:37:06.357Z
Updated: 2026-10-26T19:38:30.652Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-114460 |
vulnerable | 2026-11-03 10:15:53.194877 |
Mod_qos: query truncation during json body merging permits security-rule bypass
MEDIUM (5.3)
A flaw was found in mod_qos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string during security evaluation while leaving the actual request unchanged. An unauthenticated remote attacker could exploit this vulnerability by submitting a crafted request that conceals prohibited values from inspection, resulting in a bypass of configured security rules.
Published: 2026-10-22T06:37:07.818Z
Updated: 2026-10-30T18:34:08.202Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-114458 |
vulnerable | 2026-11-03 10:15:52.916779 |
Mod_qos: undersized connection-monitor scratch array permits heap buffer overflow
MEDIUM (5.9)
A flaw was found in mod_qos. An unauthenticated remote attacker can cause a Denial of Service (DoS) by maintaining numerous concurrent low-rate connections to a target server. When connection rate monitoring is active, the module fails to verify array boundaries when recording client IP addresses, allowing more connection records to be added than the allocated buffer can hold. This issue leads to heap memory corruption, which can crash the web server process.
Published: 2026-10-22T06:37:04.887Z
Updated: 2026-10-26T19:38:30.811Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.