{"api_version":"1","generated_at":"2026-10-22T08:08:16+00:00","cve":"CVE-2026-114458","urls":{"html":"https://cve.report/CVE-2026-114458","api":"https://cve.report/api/cve/CVE-2026-114458.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-114458","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-114458"},"summary":{"title":"Mod_qos: undersized connection-monitor scratch array permits heap buffer overflow","description":"A flaw was found in mod_qos. An unauthenticated remote attacker can cause a Denial of Service (DoS) by maintaining numerous concurrent low-rate connections to a target server. When connection rate monitoring is active, the module fails to verify array boundaries when recording client IP addresses, allowing more connection records to be added than the allocated buffer can hold. This issue leads to heap memory corruption, which can crash the web server process.","state":"PUBLISHED","assigner":"fedora","published_at":"2026-10-22 07:16:42","updated_at":"2026-10-22 07:16:42"},"problem_types":["CWE-787","CWE-787 Out-of-bounds Write"],"metrics":[{"version":"3.1","source":"patrick@puiterwijk.org","type":"Secondary","score":"5.9","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"5.9","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","data":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-114458","name":"https://access.redhat.com/security/cve/CVE-2026-114458","refsource":"patrick@puiterwijk.org","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558393","name":"https://bugzilla.redhat.com/show_bug.cgi?id=2558393","refsource":"patrick@puiterwijk.org","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-114458","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114458","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"pbuchbinder","product":"mod_qos","version":"affected 11.74 custom","platforms":[]},{"source":"CNA","vendor":"pbuchbinder","product":"mod_qos","version":"affected 11.76 custom","platforms":[]},{"source":"CNA","vendor":"pbuchbinder","product":"mod_qos","version":"affected 11.79 custom","platforms":[]}],"timeline":[{"source":"CNA","time":"2026-10-17T14:23:45.000Z","lang":"en","value":"Reported to Red Hat."},{"source":"CNA","time":"2026-10-21T14:45:26.000Z","lang":"en","value":"Made public."}],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"Red Hat would like to thank Robin \"drzobin\" Larsson for reporting this issue.","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"collectionURL":"https://svn.code.sf.net/p/mod-qos/source/","defaultStatus":"unknown","packageName":"mod_qos","product":"mod_qos","vendor":"pbuchbinder","versions":[{"status":"affected","version":"11.74","versionType":"custom"},{"status":"affected","version":"11.76","versionType":"custom"},{"status":"affected","version":"11.79","versionType":"custom"}]}],"credits":[{"lang":"en","value":"Red Hat would like to thank Robin \"drzobin\" Larsson for reporting this issue."}],"datePublic":"2026-10-21T14:45:26.000Z","descriptions":[{"lang":"en","value":"A flaw was found in mod_qos. An unauthenticated remote attacker can cause a Denial of Service (DoS) by maintaining numerous concurrent low-rate connections to a target server. When connection rate monitoring is active, the module fails to verify array boundaries when recording client IP addresses, allowing more connection records to be added than the allocated buffer can hold. This issue leads to heap memory corruption, which can crash the web server process."}],"metrics":[{"other":{"content":{"namespace":"https://access.redhat.com/security/updates/classification/","value":"Moderate"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-787","description":"Out-of-bounds Write","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-10-22T06:37:04.887Z","orgId":"92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5","shortName":"fedora"},"references":[{"tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-114458"},{"name":"RHBZ#2558393","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558393"}],"timeline":[{"lang":"en","time":"2026-10-17T14:23:45.000Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-10-21T14:45:26.000Z","value":"Made public."}],"title":"Mod_qos: undersized connection-monitor scratch array permits heap buffer overflow","x_generator":{"engine":"cvelib 1.8.0"},"x_redhatCweChain":"CWE-787: Out-of-bounds Write"}},"cveMetadata":{"assignerOrgId":"92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5","assignerShortName":"fedora","cveId":"CVE-2026-114458","datePublished":"2026-10-22T06:37:04.887Z","dateReserved":"2026-10-21T14:38:50.235Z","dateUpdated":"2026-10-22T06:37:04.887Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-22 07:16:42","lastModifiedDate":"2026-10-22 07:16:42","problem_types":["CWE-787","CWE-787 Out-of-bounds Write"],"metrics":{"cvssMetricV31":[{"source":"patrick@puiterwijk.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"114458","Ordinal":"1","Title":"Mod_qos: undersized connection-monitor scratch array permits hea","CVE":"CVE-2026-114458","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"114458","Ordinal":"1","NoteData":"A flaw was found in mod_qos. An unauthenticated remote attacker can cause a Denial of Service (DoS) by maintaining numerous concurrent low-rate connections to a target server. When connection rate monitoring is active, the module fails to verify array boundaries when recording client IP addresses, allowing more connection records to be added than the allocated buffer can hold. This issue leads to heap memory corruption, which can crash the web server process.","Type":"Description","Title":"Mod_qos: undersized connection-monitor scratch array permits hea"}]}}}