Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client.
This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3.
Users are recommended to upgrade to version 1.6.4, which fixes the issue.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade apr-util | Aug 10, 2026 | Aug 6, 2026 |
| Amazon_linux_2023 | — | Upgrade apr-util-debugsourceUpgrade apr-util-openssl-debuginfoUpgrade apr-util-mysql-debuginfoUpgrade apr-util-mysqlUpgrade apr-util-odbcUpgrade apr-util-sqlite-debuginfoUpgrade apr-util-debuginfoUpgrade apr-util-ldap-debuginfoUpgrade apr-util-lmdb-debuginfoUpgrade apr-utilUpgrade apr-util-pgsqlUpgrade apr-util-ldapUpgrade apr-util-pgsql-debuginfoUpgrade apr-util-sqliteUpgrade apr-util-opensslUpgrade apr-util-develUpgrade apr-util-lmdbUpgrade apr-util-odbc-debuginfo | Sep 1, 2026 | Aug 6, 2026 |
| Debian | — | Upgrade apr-util | Aug 16, 2026 | Aug 16, 2026 |
| Redhat_linux | — | Upgrade apr-util-debugsourceUpgrade apr-util-odbc-debuginfoUpgrade apr-util-pgsql-debuginfoUpgrade apr-util-openssl-debuginfoUpgrade apr-util-pgsqlUpgrade apr-util-lmdbUpgrade apr-util-mysql-debuginfoUpgrade apr-util-opensslUpgrade apr-util-bdb-debuginfoUpgrade apr-util-sqliteUpgrade apr-util-sqlite-debuginfoUpgrade apr-util-debuginfoUpgrade apr-util-bdbUpgrade apr-utilNo solution existsUpgrade apr-util-lmdb-debuginfoUpgrade apr-util-ldapUpgrade apr-util-ldap-debuginfoUpgrade apr-util-develUpgrade apr-util-odbcUpgrade apr-util-mysql | Aug 13, 2026 | Aug 6, 2026 |
| Rocky_linux | — | Upgrade apr-util-opensslUpgrade apr-util-mysql-debuginfoUpgrade apr-util-debugsourceUpgrade apr-util-pgsqlUpgrade apr-util-bdb-debuginfoUpgrade apr-util-sqliteUpgrade apr-util-odbc-debuginfoUpgrade apr-util-lmdbUpgrade apr-util-odbcUpgrade apr-util-sqlite-debuginfoUpgrade apr-util-openssl-debuginfoUpgrade apr-util-pgsql-debuginfoUpgrade apr-util-ldap-debuginfoUpgrade apr-util-ldapUpgrade apr-utilUpgrade apr-util-lmdb-debuginfoUpgrade apr-util-bdbUpgrade apr-util-mysqlUpgrade apr-util-develUpgrade apr-util-debuginfo | Sep 15, 2026 | Sep 11, 2026 |
| Ubuntu | — | Upgrade libaprutil1Upgrade libaprutil1 (Ubuntu Pro)Upgrade libaprutil1t64 | Sep 14, 2026 | Sep 3, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub