1521 matches found
USN-8719-1: APR-util vulnerabilities
It was discovered that APR-util incorrectly performed password hash comparisons in a way that was not constant-time. An attacker could possibly use this issue to obtain sensitive information. CVE-2025-49506 It was discovered that APR-util incorrectly handled recursive XML element quoting. An...
USN-8719-1 apr-util vulnerabilities
It was discovered that APR-util incorrectly performed password hash comparisons in a way that was not constant-time. An attacker could possibly use this issue to obtain sensitive information. CVE-2025-49506 It was discovered that APR-util incorrectly handled recursive XML element quoting. An...
Security update for libapr-util1
This update for libapr-util1 fixes the following issues: CVE-2025-49506: leaking content via side channel timing attack bsc1274237. CVE-2026-32327: XML stack recursion crash bsc1274235. CVE-2026-34191: SQL Injection via aprdbdoracle bsc1274850. CVE-2026-34502: heap buffer overflow in APR memcache...
SUSE-SU-2026:3905-1 Security update for libapr-util1
This update for libapr-util1 fixes the following issues: - CVE-2025-49506: leaking content via side channel timing attack bsc1274237. - CVE-2026-32327: XML stack recursion crash bsc1274235. - CVE-2026-34191: SQL Injection via aprdbdoracle bsc1274850. - CVE-2026-34502: heap buffer overflow in APR...
Amazon Linux 2023 : apr-util, apr-util-devel, apr-util-ldap (ALAS2023-2026-2115)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2115 advisory. APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel...
Important: apr-util
Issue Overview: APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or...
Amazon Linux 2 : apr-util, --advisory ALAS2-2026-3892 (ALAS-2026-3892)
The version of apr-util installed on the remote host is prior to 1.6.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3892 advisory. APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or password...
Important: apr-util
Issue Overview: APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or...
OPENSUSE-SU-2026:21672-1 Security update for apr-util
This update for apr-util fixes the following issues: - CVE-2025-49506: hash/password content leak via side channel timing attack against aprpasswordvalidate bsc1274237. - CVE-2026-32327: XML stack recursion crash bsc1274235. - CVE-2026-34191: SQL injection via aprdbdoracle bsc1274850. -...
Astra Linux – Vulnerability in Memcached
Memcached 1.6.7 allows a Denial of Service attack through multi-packet uploads in UDP...
apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client
A flaw was found in the memcached client in the Apache Portable Runtime Utility apr-util. A remote, unauthenticated attacker can cause the application to crash or become unresponsive by sending a specially crafted response from a malicious or compromised memcached server, resulting in a denial of...
OESA-2026-3409 apr-util security update
The mission of the Apache Portable Runtime APR project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of...
BIT-APR-UTIL-2026-34502 Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...
PT-2026-73246
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: helm-push, ip-masq-agent, grafana-alloy, steampipe, wal-g, terraform, delve, migrate, dex, swagger, nri-apache, k8sgpt, nats-server-config-reloader, timescaledb-tune, ini-file, opentofu, polaris, harbor-registry, kubernetes-csi-driver-nfs, kube-bench,...
OESA-2026-3327 apr-util security update
The mission of the Apache Portable Runtime APR project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of...
OESA-2026-3325 apr-util security update
The mission of the Apache Portable Runtime APR project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of...
SUSE CVE-2026-34502
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...
CVE-2026-34502
A flaw was found in the memcached client in the Apache Portable Runtime Utility apr-util. A remote, unauthenticated attacker can cause the application to crash or become unresponsive by sending a specially crafted response from a malicious or compromised memcached server, resulting in a denial of...
