523 matches found
PT-2026-68498
Name of the Vulnerable Software and Affected Versions APR-util versions prior to 1.6.4 Description The function apr password validate does not operate in constant-time when comparing hashes or passwords. This behavior can lead to the leakage of sensitive content through a side channel timing...
CVE-2025-49506: Observable Timing Discrepancy
APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users are...
PT-2026-68518
Name of the Vulnerable Software and Affected Versions APR-util versions prior to 1.6.4 Description A bug allows a stack recursion attack against any library consumer that parses XML from untrusted sources and utilizes the apr xml quote elem function. Recommendations Upgrade to version 1.6.4...
PT-2026-68523
Name of the Vulnerable Software and Affected Versions Apache Portable Runtime Utility versions 1.3.0 through 1.6.3 Description A heap-based buffer overflow occurs in the memcached client. A heap-based buffer overflow is a memory corruption issue that happens when an application writes more data t...
MiracleLinux 9 : apr-util-1.6.1-20.el9.1 (AXSA:2023-5974:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5974:02 advisory. apr-util: out-of-bounds writes in the aprbase64 CVE-2022-25147 Tenable has extracted the preceding description block directly from the MiracleLinux security...
MiracleLinux 7 : apr-util-1.5.2-6.el7.1 (AXSA:2023-5435:01)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5435:01 advisory. apr-util: out-of-bounds writes in the aprbase64 CVE-2022-25147 Tenable has extracted the preceding description block directly from the MiracleLinux security...
MiracleLinux 8 : apr-util-1.6.1-6.el8.1 (AXSA:2023-6139:03)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6139:03 advisory. apr-util: out-of-bounds writes in the aprbase64 CVE-2022-25147 Tenable has extracted the preceding description block directly from the MiracleLinux security...
EUVD-2009-1951
Malware in sbrugna...
TencentOS Server 3: apr-util (TSSA-2023:0073)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0073 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
RHSA-2010:0950 Red Hat Security Advisory: apr-util security update
Bulletin has no description...
RHSA-2009:1204 Red Hat Security Advisory: apr and apr-util security update
Bulletin has no description...
RHSA-2009:1107 Red Hat Security Advisory: apr-util security update
Bulletin has no description...
RHSA-2023:3177 Red Hat Security Advisory: apr-util security update
Bulletin has no description...
RHSA-2023:3178 Red Hat Security Advisory: apr-util security update
Bulletin has no description...
RHSA-2023:3145 Red Hat Security Advisory: apr-util security update
Bulletin has no description...
RHSA-2023:3360 Red Hat Security Advisory: apr-util security update
Bulletin has no description...
RHSA-2023:3147 Red Hat Security Advisory: apr-util security update
Bulletin has no description...
RHSA-2023:3380 Red Hat Security Advisory: apr-util security update
Bulletin has no description...