DeutschShown in its original language — a full translation is planned for a future version.
Apache Portable Runtime (APR): Mehrere Schwachstellen
view advisory published 2026-08-06
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Portable Runtime (APR) ausnutzen, um SQL-Injection durchzuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-34502US | — | — | ||
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client
This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3. | ||||
| CVE-2026-34501US | — | — | ||
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client.
This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3.
Users are… | ||||
| CVE-2026-34191US | — | — | ||
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider.
This issue affec… | ||||
| CVE-2026-32327US | — | — | ||
A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the apr_xml_quote_elem()… | ||||
| CVE-2025-49506US | — | — | ||
APR-util versions 1.6.3 (and earlier) function apr_password_validate() was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:58474 vom 2026-08-22external
- Red Hat Security Advisory RHSA-2026:66341 vom 2026-09-10external
- Red Hat Security Advisory RHSA-2026:66392 vom 2026-09-10external
- Red Hat Security Advisory RHSA-2026:69113 vom 2026-09-21external
- Amazon Linux Security Advisory ALAS2-2026-3892 vom 2026-09-01external
- Rocky Linux Security Advisory RLSA-2026:66341 vom 2026-09-11external
- Rocky Linux Security Advisory RLSA-2026:66392 vom 2026-09-11external
- Rocky Linux Security Advisory RLSA-2026:69113 vom 2026-09-22external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan