Apache Apr-util vulnerabilities

• apache apr-util, apache software foundation portable runtime utility +1 more Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack CVE-2025-49506 Fix available 7.5 HighAugust 6, 2026
• apache apr-util, apache software foundation portable runtime utility +1 more Apache Portable Runtime Utility: apr-util XML stack recursion crash CVE-2026-32327 Fix available 9.1 CriticalAugust 6, 2026
• apache software foundation portable runtime utility, apache apr-util +1 more Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle CVE-2026-34191 Fix available 9.1 CriticalAugust 6, 2026
• apache software foundation portable runtime utility, apache apr-util +1 more Apache Portable Runtime Utility: Heap buffer overflow in APR redis client CVE-2026-34501 Fix available 7.5 HighAugust 6, 2026
• apache software foundation portable runtime utility, apache apr-util +1 more Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client CVE-2026-34502 Fix available 7.5 HighAugust 6, 2026
• apache http server, apr-util +1 more The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3... CVE-2011-1928 Fix available EPSS 10.3% 4.3 MediumMay 15, 2011
• apache apr-util, http server +1 more Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache... CVE-2010-1623 Fix available EPSS 20.3% 5.0 MediumOctober 4, 2010
• apache apr-util, portable runtime +1 more Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable... CVE-2009-2412 Fix available EPSS 13.8% 10.0 HighAugust 6, 2009
• apache apr-util, http server, canonical ubuntu linux +2 more Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big... CVE-2009-1956 Fix available EPSS 12.0% 6.4 MediumJune 6, 2009
• apache apr-util, http server, apple mac os x +4 more +6 more The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7,... CVE-2009-1955 Public exploitFix available EPSS 53.0% 7.5 HighJune 4, 2009
• apache apr-util, http server +1 more The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5... CVE-2009-0023 Fix available 4.3 MediumJune 4, 2009