376 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-49506
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking thei...
CVE-2026-32327
A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the aprxmlquoteelem function. Users are recommended to upgrade to version 1.6.4, which fixes this issue...
CVE-2025-49506
APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users are...
CVE-2025-49506 Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack
APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users are...
EUVD-2025-210642
APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users are...
CVE-2026-32327
CVE-2026-32327 concerns the APR-util library. The connected sources confirm a vulnerability in version 1.6.3 and earlier where a stack recursion flaw can be triggered by XML parsing from untrusted sources via the apr_xml_quote_elem() function, potentially causing a crash. The issue affects APR-ut...
CVE-2026-32327 Apache Portable Runtime Utility: apr-util XML stack recursion crash
A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the aprxmlquoteelem function. Users are recommended to upgrade to version 1.6.4, which fixes this issue...
CVE-2026-32327
A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the aprxmlquoteelem function. Users are recommended to upgrade to version 1.6.4, which fixes this issue...
MiracleLinux 7 : apr-util-1.5.2-6.el7.1 (AXSA:2023-5435:01)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5435:01 advisory. apr-util: out-of-bounds writes in the aprbase64 CVE-2022-25147 Tenable has extracted the preceding description block directly from the MiracleLinux security...
MiracleLinux 8 : apr-util-1.6.1-6.el8.1 (AXSA:2023-6139:03)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6139:03 advisory. apr-util: out-of-bounds writes in the aprbase64 CVE-2022-25147 Tenable has extracted the preceding description block directly from the MiracleLinux security...
MiracleLinux 9 : apr-util-1.6.1-20.el9.1 (AXSA:2023-5974:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5974:02 advisory. apr-util: out-of-bounds writes in the aprbase64 CVE-2022-25147 Tenable has extracted the preceding description block directly from the MiracleLinux security...
EUVD-2009-1951
Malware in sbrugna...
TencentOS Server 3: apr-util (TSSA-2023:0073)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0073 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
RHSA-2010:0950 Red Hat Security Advisory: apr-util security update
Bulletin has no description...
RHSA-2009:1204 Red Hat Security Advisory: apr and apr-util security update
Bulletin has no description...
RHSA-2009:1107 Red Hat Security Advisory: apr-util security update
Bulletin has no description...
RHSA-2023:3177 Red Hat Security Advisory: apr-util security update
Bulletin has no description...
RHSA-2023:3178 Red Hat Security Advisory: apr-util security update
Bulletin has no description...