Known vulnerabilities in apr-util (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
apr-util (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:apr-util_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.5.3-1ubuntu0.1~esm3
1.5.4-1ubuntu0.1~esm1
1.6.1-2ubuntu0.1+esm1
1.6.1-4ubuntu2.2+esm1
1.6.1-5ubuntu4.22.04.3
1.6.3-1.1ubuntu7.1
1.6.3-3ubuntu3.1
1.6.3-3ubuntu2
1.6.3-3
1.6.3-3ubuntu1
1.6.3-2
1.6.3-2ubuntu1
1.6.3-1ubuntu3
1.6.3-1ubuntu2
1.6.3-1ubuntu1.1
1.6.3-1.1ubuntu7
1.6.3-1.1ubuntu6
1.6.3-1.1ubuntu5
1.6.3-1.1ubuntu4
1.6.3-1.1ubuntu3
1.6.3-1.1ubuntu2
1.6.3-1
1.6.3-1ubuntu1
1.6.3-1.1
1.6.3-1.1ubuntu1
1.6.1-5ubuntu4.22.10.1
1.6.1-5ubuntu4.22.04.2
1.6.1-5ubuntu4.22.04.1
1.6.1-5
1.6.1-5ubuntu1
1.6.1-5ubuntu2
1.6.1-5ubuntu3
1.6.1-5ubuntu4
1.6.1-5ubuntu5
1.6.1-5.1
1.6.1-5.2
1.6.1-5.2ubuntu1
1.6.1-4ubuntu2.2
1.6.1-4ubuntu2.1
1.6.1-2ubuntu0.1
1.6.1-4ubuntu1
1.6.1
1.6.1-4ubuntu2
1.6.1-4ubuntu0.1
1.5.4
1.5.3
1.3.12+dfsg
1.6.1-4build1
1.6.1-4
1.6.1-3build2
1.6.1-3build1
1.6.1-3
1.6.1-2ubuntu1
1.6.1-2
1.6.1-1ubuntu2
1.6.1-1ubuntu1
1.6.1-1build1
1.6.1-1
1.6.0-2
1.6.0-1
1.2.7+dfsg-1
1.2.7+dfsg-2
1.2.12+dfsg-1
1.2.12+dfsg-2
1.2.12+dfsg-3
1.2.12+dfsg-4
1.2.12+dfsg-5
1.2.12+dfsg-6
1.2.12+dfsg-7
1.2.12+dfsg-8
1.3.2+dfsg-1
1.3.4+dfsg-1
1.3.4+dfsg-2
1.3.7+dfsg-1
1.3.8+dfsg-1
1.3.9+dfsg-1
1.3.9+dfsg-2
1.3.9+dfsg-3
1.3.9+dfsg-4
1.3.9+dfsg-5
1.3.10+dfsg-1
1.3.10+dfsg-2
1.3.12+dfsg-1
1.3.12+dfsg-2
1.3.12+dfsg-3
1.5.4-3
1.5.4-2
1.5.4-1build1
1.2.2-3
1.2.2-4
1.2.7-1
1.2.7-2
1.4.1-1
1.4.1-2
1.4.1-3
1.5.2-1
1.5.2-2
1.5.3-1
1.5.3-2
1.5.3-3
1.5.4-1
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU144930 - Heap-based Buffer Overflow CVE-2026-34502 |
CWE-122 | Medium | 1.5.3-1ubuntu0.1~esm3, 1.5.4-1ubuntu0.1~esm1, 1.6.1-2ubuntu0.1+esm1, 1.6.1-4ubuntu2.2+esm1, 1.6.1-5ubuntu4.22.04.3, 1.6.3-1.1ubuntu7.1, 1.6.3-3ubuntu3.1 | 24.08.2026 |
SB20260824200 SB20260824221 SB20260824226 and 8 more |
||
| #VU144929 - Heap-based Buffer Overflow CVE-2026-34501 |
CWE-122 | High | 1.5.3-1ubuntu0.1~esm3, 1.5.4-1ubuntu0.1~esm1, 1.6.1-2ubuntu0.1+esm1, 1.6.1-4ubuntu2.2+esm1, 1.6.1-5ubuntu4.22.04.3, 1.6.3-1.1ubuntu7.1, 1.6.3-3ubuntu3.1 | 24.08.2026 |
SB20260824200 SB20260824221 SB20260824226 and 7 more |
||
| #VU144927 - Uncontrolled Recursion CVE-2026-32327 |
CWE-674 | Medium | 1.5.3-1ubuntu0.1~esm3, 1.5.4-1ubuntu0.1~esm1, 1.6.1-2ubuntu0.1+esm1, 1.6.1-4ubuntu2.2+esm1, 1.6.1-5ubuntu4.22.04.3, 1.6.3-1.1ubuntu7.1, 1.6.3-3ubuntu3.1 | 24.08.2026 |
SB20260824200 SB20260824221 SB20260824223 and 10 more |
||
| #VU144926 - Information Exposure Through Timing Discrepancy CVE-2025-49506 |
CWE-208 | Low | 1.5.3-1ubuntu0.1~esm3, 1.5.4-1ubuntu0.1~esm1, 1.6.1-2ubuntu0.1+esm1, 1.6.1-4ubuntu2.2+esm1, 1.6.1-5ubuntu4.22.04.3, 1.6.3-1.1ubuntu7.1, 1.6.3-3ubuntu3.1 | 24.08.2026 |
SB20260824200 SB20260824221 SB20260824226 and 8 more |