CVE-2026-34502

Description

References

• lists.apache.org/thread/spk5643m4vq0mb8h5b9hz9gkp57ombl8 · Mailing List
• openwall.com/lists/oss-security/2026/08/06/12 · Mailing List

apr-util 的其他漏洞

• CVE-2026-34501高危 7.5Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utilit…
• CVE-2026-34191严重 9.1Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via ap…
• CVE-2026-32327严重 9.1A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which parses XML from untrusted s…
• CVE-2025-49506高危 7.5APR-util versions 1.6.3 (and earlier) function apr_password_validate() was not constant-time with regards to hashes or passwords comparisons…
• CVE-2011-1928中危 4.3The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18,…