2939 matches found
CVE-2026-19565
Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey. CreateSessionAuthKey runs five rounds of SHA-256, each over a fresh Time::HiRes reading formatted to six decimal places, the running...
CVE-2026-19565 Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey
Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey. CreateSessionAuthKey runs five rounds of SHA-256, each over a fresh Time::HiRes reading formatted to six decimal places, the running...
EUVD-2026-64663
Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey. CreateSessionAuthKey runs five rounds of SHA-256, each over a fresh Time::HiRes reading formatted to six decimal places, the running...
ROOT-OS-DEBIAN-13-CVE-2026-32327 CVE-2026-32327 in apr-util - Patched by Root
Root has patched CVE-2026-32327 in the apr-util package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-49506 CVE-2025-49506 in apr-util - Patched by Root
Root has patched CVE-2025-49506 in the apr-util package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-34191 CVE-2026-34191 in apr-util - Patched by Root
Root has patched CVE-2026-34191 in the apr-util package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-34502 CVE-2026-34502 in apr-util - Patched by Root
Root has patched CVE-2026-34502 in the apr-util package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-34501 CVE-2026-34501 in apr-util - Patched by Root
Root has patched CVE-2026-34501 in the apr-util package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-53615 CVE-2026-53615 in util-linux - Patched by Root
Root has patched CVE-2026-53615 in the util-linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-13595 CVE-2026-13595 in util-linux - Patched by Root
Root has patched CVE-2026-13595 in the util-linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-27456 CVE-2026-27456 in util-linux - Patched by Root
Root has patched CVE-2026-27456 in the util-linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-14104 CVE-2025-14104 in util-linux - Patched by Root
Root has patched CVE-2025-14104 in the util-linux package for Root:Debian:11. Multiple fixed versions available...
PT-2026-79780
Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey. CreateSessionAuthKey runs five rounds of SHA-256, each over a fresh Time::HiRes reading formatted to six decimal places, the running...
apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client
A flaw was found in the Redis client in the Apache Portable Runtime Utility apr-util. A heap buffer overflow can be triggered when the application processes a specially crafted response from a Redis server, resulting in a crash and denial of service...
apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client
A flaw was found in the memcached client in the Apache Portable Runtime Utility apr-util. A remote, unauthenticated attacker can cause the application to crash or become unresponsive by sending a specially crafted response from a malicious or compromised memcached server, resulting in a denial of...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: apr-util: apr-util-1.6.5-1.hum1 aarch64, x8664 apr-util-devel-1.6.5-1.hum1 aarch64, x8664 apr-util-ldap-1.6.5-1.hum1 aarch64, x8664 apr-util-lmdb-1.6.5-1.hum1 aarch64, x8664...
apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation
A flaw was found in Apache Portable Runtime Utility apr-util. The aprpasswordvalidate function does not perform constant-time comparisons for hashes or passwords. This vulnerability allows a remote attacker to conduct a timing attack, particularly on platforms without crypt such as Windows, BeOS,...
apr-util: Apache Portable Runtime Utility: Denial of Service via XML stack recursion attack
A flaw was found in Apache Portable Runtime Utility apr-util. A remote attacker could exploit a stack recursion vulnerability by providing specially crafted XML input to a library consumer that uses the aprxmlquoteelem function. This could lead to a denial of service DoS due to an application cra...