https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:56:04.105219+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2009-avi-244 certa-2009-avi-244 — Plusieurs vulnérabilités présentes dans APR-util permettent à un utilisateur distant de provoquer un déni de service ou… 2026-10-03T04:56:04.236169+00:00 certa-2009-avi-244 https://cve.radiocsirt.org/vuln/euvd-2026-122927 EUVD-2026-122927 2026-10-03T04:56:04.236216+00:00 EUVD-2026-122927 https://cve.radiocsirt.org/vuln/fkie_cve-2009-1955 fkie_cve-2009-1955 2026-10-03T04:56:04.236232+00:00

The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.

 https://cve.radiocsirt.org/vuln/ghsa-hfr6-pxvf-frf7 GHSA-hfr6-pxvf-frf7 2026-10-03T04:56:04.236262+00:00

The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.

 https://cve.radiocsirt.org/vuln/gsd-2009-1955 gsd-2009-1955 2026-10-03T04:56:04.236280+00:00 gsd-2009-1955 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10268-1 openSUSE-SU-2024:10268-1 — apache2-2.4.23-4.1 on GA media 2026-10-03T04:56:04.236291+00:00

apache2-2.4.23-4.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2009:1107 RHSA-2009:1107 — Red Hat Security Advisory: apr-util security update 2026-10-03T04:56:04.236332+00:00

apr-util heap buffer underwrite apr-util billion laughs attack apr-util single NULL byte buffer overflow