451 matches found
CVE-2026-34502
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...
CVE-2025-49506
CVE-2025-49506 affects APR-util 1.6.3 and earlier: the function apr_password_validate() is not constant-time for hash/password comparisons, potentially leaking content via a side-channel timing attack on platforms without crypt() (e.g., Windows, BeOS, NetWare, Android). The issue is mitigated by ...
CVE-2026-34191
The CVE-2026-34191 entry concerns an SQL Injection vulnerability in the Apache Portable Runtime Utility via the apr_dbd_oracle provider. Affected range is APIs/versions 1.6.0 through 1.6.3 . The root cause is improper neutralization of special elements used in SQL commands, enabling potential una...
EUVD-2026-53918
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Portable Runtime Utility via aprdbdoracle provider. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3...
EUVD-2026-53917
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3. Users are recommended to upgrade to version 1.6.4, which fixes the issue...
CVE-2026-34501 Apache Portable Runtime Utility: Heap buffer overflow in APR redis client
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3. Users are recommended to upgrade to version 1.6.4, which fixes the issue...
CVE-2026-34502 Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...
EUVD-2026-53916
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...
CVE-2026-34502
CVE-2026-34502 corresponds to a Heap-based Buffer Overflow in the Apache Portable Runtime Utility memcached client, affecting APR Utility versions 1.3.0 through 1.6.3. The entry notes a NETWORK attack vector with LOW attack complexity and NO privileges required, and an impact profile of Availabil...
Unity Linux 20.1060e / 20.1070e Security Update: apr (UTSA-2026-016610)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016610 advisory. When aprtimeexp or aprosexptime functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be...
Astra Linux – Vulnerability in apr-util
The integer overflow or wraparound vulnerability in the aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond the bounds of a buffer. This issue affects Apache Portable Runtime Utility APR-util version 1.6.1 and earlier...
MiracleLinux 7 : apr-1.4.8-3.el7.1 (AXSA:2017-2425:01)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-2425:01 advisory. An out-of-bounds array dereference was found in aprtimeexpget. An attacker could abuse an unvalidated usage of this function to cause a denial of service or...
MiracleLinux 4 : apr-1.3.9-5.AXS4.1 (AXSA:2017-2427:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-2427:01 advisory. An out-of-bounds array dereference was found in aprtimeexpget. An attacker could abuse an unvalidated usage of this function to cause a denial of service or...
MiracleLinux 3 : apr-util-1.2.7-7AXS3.2 (AXSA:2009-373:02)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2009-373:02 advisory. The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility...
MiracleLinux 3 : apr-util-1.2.7-7AXS3.1 (AXSA:2009-69:01)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-69:01 advisory. The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utilit...
MiracleLinux 3 : apr-1.2.7-11AXS3.1 (AXSA:2009-372:01)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2009-372:01 advisory. The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines, forming a system portability layer to as many...
MiracleLinux 4 : apr-1.3.9-3.AXS4.1 (AXSA:2011-196:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-196:01 advisory. The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines, forming a system portability layer to as many...
MiracleLinux 4 : apr-1.3.9-3.2.0.2.AXS4 (AXSA:2011-669:02)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-669:02 advisory. The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines, forming a system portability layer to as many...