REDHAT-BUG-2558311: Low severity mod_qos project mod_qos vulnerability
Published Oct 21, 2026
·Updated
A flaw was found in modqos. With modparp available and JSON body filtering enabled, the jescapeurl() helper can fill its allocation with percent-encoded input without leaving space for a terminating NUL byte. Subsequent query construction treats the buffer as a terminated string and may read past its end. An unauthenticated remote client can supply a crafted JSON string to trigger this out-of-bounds read, which may crash an Apache worker process.
Affected Software
1 affected component
mod_qos project mod_qos
Event History
Oct 21, 2026
Data Sourced
via Red Hat·02:54 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What configuration is required for this issue to be exposed?
The issue requires mod_parp to be available and JSON body filtering to be enabled in mod_qos.
2
Does exploitation require authentication?
No. An unauthenticated remote client can send a crafted JSON string to trigger the out-of-bounds read.
3
What is the likely impact of successful exploitation?
The out-of-bounds read may crash an Apache worker process.