Known vulnerabilities in apr-util (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:apr-util_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting apr-util (Ubuntu package) apr-util (Ubuntu package) is affected by 4 known vulnerabilities: 1 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144930 - Heap-based Buffer Overflow
CVE-2026-34502
CWE-122 Medium
No
No
1.5.3-1ubuntu0.1~esm3, 1.5.4-1ubuntu0.1~esm1, 1.6.1-2ubuntu0.1+esm1, 1.6.1-4ubuntu2.2+esm1, 1.6.1-5ubuntu4.22.04.3, 1.6.3-1.1ubuntu7.1, 1.6.3-3ubuntu3.1 24.08.2026 SB20260824200
SB20260824221
SB20260824226
and 8 more
#VU144929 - Heap-based Buffer Overflow
CVE-2026-34501
CWE-122 High
No
No
1.5.3-1ubuntu0.1~esm3, 1.5.4-1ubuntu0.1~esm1, 1.6.1-2ubuntu0.1+esm1, 1.6.1-4ubuntu2.2+esm1, 1.6.1-5ubuntu4.22.04.3, 1.6.3-1.1ubuntu7.1, 1.6.3-3ubuntu3.1 24.08.2026 SB20260824200
SB20260824221
SB20260824226
and 7 more
#VU144927 - Uncontrolled Recursion
CVE-2026-32327
CWE-674 Medium
No
No
1.5.3-1ubuntu0.1~esm3, 1.5.4-1ubuntu0.1~esm1, 1.6.1-2ubuntu0.1+esm1, 1.6.1-4ubuntu2.2+esm1, 1.6.1-5ubuntu4.22.04.3, 1.6.3-1.1ubuntu7.1, 1.6.3-3ubuntu3.1 24.08.2026 SB20260824200
SB20260824221
SB20260824223
and 10 more
#VU144926 - Information Exposure Through Timing Discrepancy
CVE-2025-49506
CWE-208 Low
No
No
1.5.3-1ubuntu0.1~esm3, 1.5.4-1ubuntu0.1~esm1, 1.6.1-2ubuntu0.1+esm1, 1.6.1-4ubuntu2.2+esm1, 1.6.1-5ubuntu4.22.04.3, 1.6.3-1.1ubuntu7.1, 1.6.3-3ubuntu3.1 24.08.2026 SB20260824200
SB20260824221
SB20260824226
and 8 more