{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34502.json"
      }
    ],
    "title": "apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client",
    "tracking": {
      "current_release_date": "2026-08-22T01:15:52+00:00",
      "generator": {
        "date": "2026-08-22T01:15:52+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "CVE-2026-34502",
      "initial_release_date": "2026-08-06T14:31:07.682000+00:00",
      "revision_history": [
        {
          "date": "2026-08-06T14:31:07.682000+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-11T15:32:11.079174+00:00",
          "number": "2",
          "summary": "Current version"
        },
        {
          "date": "2026-08-22T01:15:52+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 10",
                "product": {
                  "name": "Red Hat Enterprise Linux 10",
                  "product_id": "red_hat_enterprise_linux_10",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 10"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 6",
                "product": {
                  "name": "Red Hat Enterprise Linux 6",
                  "product_id": "red_hat_enterprise_linux_6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 6"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 7",
                "product": {
                  "name": "Red Hat Enterprise Linux 7",
                  "product_id": "red_hat_enterprise_linux_7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 7"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 8",
                "product": {
                  "name": "Red Hat Enterprise Linux 8",
                  "product_id": "red_hat_enterprise_linux_8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 8"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 9",
                "product": {
                  "name": "Red Hat Enterprise Linux 9",
                  "product_id": "red_hat_enterprise_linux_9",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 9"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "category": "product_version",
            "name": "apr-util-devel",
            "product": {
              "name": "apr-util-devel",
              "product_id": "apr-util-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/apr-util-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "apr-util-odbc",
            "product": {
              "name": "apr-util-odbc",
              "product_id": "apr-util-odbc",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/apr-util-odbc"
              }
            }
          },
          {
            "category": "product_version",
            "name": "apr-util.src",
            "product": {
              "name": "apr-util.src",
              "product_id": "apr-util.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/apr-util?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "apr-util-pgsql",
            "product": {
              "name": "apr-util-pgsql",
              "product_id": "apr-util-pgsql",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/apr-util-pgsql"
              }
            }
          },
          {
            "category": "product_version",
            "name": "apr-util-mysql",
            "product": {
              "name": "apr-util-mysql",
              "product_id": "apr-util-mysql",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/apr-util-mysql"
              }
            }
          },
          {
            "category": "product_version",
            "name": "apr-util-lmdb",
            "product": {
              "name": "apr-util-lmdb",
              "product_id": "apr-util-lmdb",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/apr-util-lmdb"
              }
            }
          },
          {
            "category": "product_version",
            "name": "apr-util-openssl",
            "product": {
              "name": "apr-util-openssl",
              "product_id": "apr-util-openssl",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/apr-util-openssl"
              }
            }
          },
          {
            "category": "product_version",
            "name": "apr-util-sqlite",
            "product": {
              "name": "apr-util-sqlite",
              "product_id": "apr-util-sqlite",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/apr-util-sqlite"
              }
            }
          },
          {
            "category": "product_version",
            "name": "apr-util-ldap",
            "product": {
              "name": "apr-util-ldap",
              "product_id": "apr-util-ldap",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/apr-util-ldap"
              }
            }
          },
          {
            "category": "product_version",
            "name": "apr-util",
            "product": {
              "name": "apr-util",
              "product_id": "apr-util",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/apr-util"
              }
            }
          },
          {
            "category": "product_version",
            "name": "apr-util-nss",
            "product": {
              "name": "apr-util-nss",
              "product_id": "apr-util-nss",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/apr-util-nss"
              }
            }
          },
          {
            "category": "product_version",
            "name": "apr-util-bdb",
            "product": {
              "name": "apr-util-bdb",
              "product_id": "apr-util-bdb",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/apr-util-bdb"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apr-util-main@aarch64",
                "product": {
                  "name": "apr-util-main@aarch64",
                  "product_id": "apr-util-main@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apr-util@1.6.5-1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apr-util-main@src",
                "product": {
                  "name": "apr-util-main@src",
                  "product_id": "apr-util-main@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apr-util@1.6.5-1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apr-util-main@x86_64",
                "product": {
                  "name": "apr-util-main@x86_64",
                  "product_id": "apr-util-main@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apr-util@1.6.5-1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-main@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:apr-util-main@aarch64"
        },
        "product_reference": "apr-util-main@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-main@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:apr-util-main@src"
        },
        "product_reference": "apr-util-main@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-main@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:apr-util-main@x86_64"
        },
        "product_reference": "apr-util-main@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-devel as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:apr-util-devel"
        },
        "product_reference": "apr-util-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-ldap as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:apr-util-ldap"
        },
        "product_reference": "apr-util-ldap",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-lmdb as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:apr-util-lmdb"
        },
        "product_reference": "apr-util-lmdb",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-mysql as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:apr-util-mysql"
        },
        "product_reference": "apr-util-mysql",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-odbc as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:apr-util-odbc"
        },
        "product_reference": "apr-util-odbc",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-openssl as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:apr-util-openssl"
        },
        "product_reference": "apr-util-openssl",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-pgsql as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:apr-util-pgsql"
        },
        "product_reference": "apr-util-pgsql",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-sqlite as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:apr-util-sqlite"
        },
        "product_reference": "apr-util-sqlite",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util.src as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:apr-util.src"
        },
        "product_reference": "apr-util.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:apr-util"
        },
        "product_reference": "apr-util",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-devel as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:apr-util-devel"
        },
        "product_reference": "apr-util-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-ldap as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:apr-util-ldap"
        },
        "product_reference": "apr-util-ldap",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-mysql as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:apr-util-mysql"
        },
        "product_reference": "apr-util-mysql",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-odbc as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:apr-util-odbc"
        },
        "product_reference": "apr-util-odbc",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-pgsql as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:apr-util-pgsql"
        },
        "product_reference": "apr-util-pgsql",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-sqlite as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:apr-util-sqlite"
        },
        "product_reference": "apr-util-sqlite",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util.src as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:apr-util.src"
        },
        "product_reference": "apr-util.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:apr-util"
        },
        "product_reference": "apr-util",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-devel as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:apr-util-devel"
        },
        "product_reference": "apr-util-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-ldap as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:apr-util-ldap"
        },
        "product_reference": "apr-util-ldap",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-mysql as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:apr-util-mysql"
        },
        "product_reference": "apr-util-mysql",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-nss as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:apr-util-nss"
        },
        "product_reference": "apr-util-nss",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-odbc as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:apr-util-odbc"
        },
        "product_reference": "apr-util-odbc",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-openssl as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:apr-util-openssl"
        },
        "product_reference": "apr-util-openssl",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-pgsql as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:apr-util-pgsql"
        },
        "product_reference": "apr-util-pgsql",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-sqlite as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:apr-util-sqlite"
        },
        "product_reference": "apr-util-sqlite",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util.src as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:apr-util.src"
        },
        "product_reference": "apr-util.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:apr-util"
        },
        "product_reference": "apr-util",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-bdb as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:apr-util-bdb"
        },
        "product_reference": "apr-util-bdb",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-devel as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:apr-util-devel"
        },
        "product_reference": "apr-util-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-ldap as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:apr-util-ldap"
        },
        "product_reference": "apr-util-ldap",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-mysql as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:apr-util-mysql"
        },
        "product_reference": "apr-util-mysql",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-odbc as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:apr-util-odbc"
        },
        "product_reference": "apr-util-odbc",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-openssl as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:apr-util-openssl"
        },
        "product_reference": "apr-util-openssl",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-pgsql as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:apr-util-pgsql"
        },
        "product_reference": "apr-util-pgsql",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-sqlite as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:apr-util-sqlite"
        },
        "product_reference": "apr-util-sqlite",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util.src as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:apr-util.src"
        },
        "product_reference": "apr-util.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:apr-util"
        },
        "product_reference": "apr-util",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-bdb as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:apr-util-bdb"
        },
        "product_reference": "apr-util-bdb",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-devel as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:apr-util-devel"
        },
        "product_reference": "apr-util-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-ldap as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:apr-util-ldap"
        },
        "product_reference": "apr-util-ldap",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-mysql as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:apr-util-mysql"
        },
        "product_reference": "apr-util-mysql",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-odbc as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:apr-util-odbc"
        },
        "product_reference": "apr-util-odbc",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-openssl as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:apr-util-openssl"
        },
        "product_reference": "apr-util-openssl",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-pgsql as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:apr-util-pgsql"
        },
        "product_reference": "apr-util-pgsql",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util-sqlite as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:apr-util-sqlite"
        },
        "product_reference": "apr-util-sqlite",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apr-util.src as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:apr-util.src"
        },
        "product_reference": "apr-util.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-34502",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"
      },
      "discovery_date": "2026-08-06T14:41:42.884903+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2512083"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the memcached client in the Apache Portable Runtime Utility (apr-util). A remote, unauthenticated attacker can cause the application to crash or become unresponsive by sending a specially crafted response from a malicious or compromised memcached server, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The impact of this vulnerability is rated as Moderate. While the flaw is network-reachable and requires no authentication against the application itself, exploitation depends on the attacker controlling or compromising the memcached server that the application queries. An attacker cannot trigger the denial of service by sending data directly to the affected application — they must first be in a position to influence memcached responses, either by compromising the memcached backend or performing a man-in-the-middle attack on the connection between the application and memcached. This prerequisite significantly limits the real-world exploitability compared to a direct network denial-of-service attack.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:apr-util-main@aarch64",
          "Red Hat Hardened Images:apr-util-main@src",
          "Red Hat Hardened Images:apr-util-main@x86_64"
        ],
        "known_affected": [
          "red_hat_enterprise_linux_10:apr-util-devel",
          "red_hat_enterprise_linux_10:apr-util-ldap",
          "red_hat_enterprise_linux_10:apr-util-lmdb",
          "red_hat_enterprise_linux_10:apr-util-mysql",
          "red_hat_enterprise_linux_10:apr-util-odbc",
          "red_hat_enterprise_linux_10:apr-util-openssl",
          "red_hat_enterprise_linux_10:apr-util-pgsql",
          "red_hat_enterprise_linux_10:apr-util-sqlite",
          "red_hat_enterprise_linux_10:apr-util.src",
          "red_hat_enterprise_linux_6:apr-util",
          "red_hat_enterprise_linux_6:apr-util-devel",
          "red_hat_enterprise_linux_6:apr-util-ldap",
          "red_hat_enterprise_linux_6:apr-util-mysql",
          "red_hat_enterprise_linux_6:apr-util-odbc",
          "red_hat_enterprise_linux_6:apr-util-pgsql",
          "red_hat_enterprise_linux_6:apr-util-sqlite",
          "red_hat_enterprise_linux_6:apr-util.src",
          "red_hat_enterprise_linux_7:apr-util",
          "red_hat_enterprise_linux_7:apr-util-devel",
          "red_hat_enterprise_linux_7:apr-util-ldap",
          "red_hat_enterprise_linux_7:apr-util-mysql",
          "red_hat_enterprise_linux_7:apr-util-nss",
          "red_hat_enterprise_linux_7:apr-util-odbc",
          "red_hat_enterprise_linux_7:apr-util-openssl",
          "red_hat_enterprise_linux_7:apr-util-pgsql",
          "red_hat_enterprise_linux_7:apr-util-sqlite",
          "red_hat_enterprise_linux_7:apr-util.src",
          "red_hat_enterprise_linux_8:apr-util",
          "red_hat_enterprise_linux_8:apr-util-bdb",
          "red_hat_enterprise_linux_8:apr-util-devel",
          "red_hat_enterprise_linux_8:apr-util-ldap",
          "red_hat_enterprise_linux_8:apr-util-mysql",
          "red_hat_enterprise_linux_8:apr-util-odbc",
          "red_hat_enterprise_linux_8:apr-util-openssl",
          "red_hat_enterprise_linux_8:apr-util-pgsql",
          "red_hat_enterprise_linux_8:apr-util-sqlite",
          "red_hat_enterprise_linux_8:apr-util.src",
          "red_hat_enterprise_linux_9:apr-util",
          "red_hat_enterprise_linux_9:apr-util-bdb",
          "red_hat_enterprise_linux_9:apr-util-devel",
          "red_hat_enterprise_linux_9:apr-util-ldap",
          "red_hat_enterprise_linux_9:apr-util-mysql",
          "red_hat_enterprise_linux_9:apr-util-odbc",
          "red_hat_enterprise_linux_9:apr-util-openssl",
          "red_hat_enterprise_linux_9:apr-util-pgsql",
          "red_hat_enterprise_linux_9:apr-util-sqlite",
          "red_hat_enterprise_linux_9:apr-util.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34502"
        },
        {
          "category": "external",
          "summary": "RHBZ#2512083",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512083"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34502",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34502"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34502",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34502"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/spk5643m4vq0mb8h5b9hz9gkp57ombl8",
          "url": "https://lists.apache.org/thread/spk5643m4vq0mb8h5b9hz9gkp57ombl8"
        }
      ],
      "release_date": "2026-08-06T14:31:07.682000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-22T00:58:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:apr-util-main@aarch64",
            "Red Hat Hardened Images:apr-util-main@src",
            "Red Hat Hardened Images:apr-util-main@x86_64"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:58474"
        },
        {
          "category": "workaround",
          "details": "Restrict network access for applications that use the `apr-util` memcached client to communicate only with trusted memcached servers. Ensure that Red Hat products are configured to avoid connecting to untrusted or publicly exposed memcached instances. If the memcached client functionality is not essential, consider disabling or removing any dependent components. A service restart may be required for changes to take effect.",
          "product_ids": [
            "Red Hat Hardened Images:apr-util-main@aarch64",
            "Red Hat Hardened Images:apr-util-main@src",
            "Red Hat Hardened Images:apr-util-main@x86_64",
            "red_hat_enterprise_linux_10:apr-util-devel",
            "red_hat_enterprise_linux_10:apr-util-ldap",
            "red_hat_enterprise_linux_10:apr-util-lmdb",
            "red_hat_enterprise_linux_10:apr-util-mysql",
            "red_hat_enterprise_linux_10:apr-util-odbc",
            "red_hat_enterprise_linux_10:apr-util-openssl",
            "red_hat_enterprise_linux_10:apr-util-pgsql",
            "red_hat_enterprise_linux_10:apr-util-sqlite",
            "red_hat_enterprise_linux_10:apr-util.src",
            "red_hat_enterprise_linux_6:apr-util",
            "red_hat_enterprise_linux_6:apr-util-devel",
            "red_hat_enterprise_linux_6:apr-util-ldap",
            "red_hat_enterprise_linux_6:apr-util-mysql",
            "red_hat_enterprise_linux_6:apr-util-odbc",
            "red_hat_enterprise_linux_6:apr-util-pgsql",
            "red_hat_enterprise_linux_6:apr-util-sqlite",
            "red_hat_enterprise_linux_6:apr-util.src",
            "red_hat_enterprise_linux_7:apr-util",
            "red_hat_enterprise_linux_7:apr-util-devel",
            "red_hat_enterprise_linux_7:apr-util-ldap",
            "red_hat_enterprise_linux_7:apr-util-mysql",
            "red_hat_enterprise_linux_7:apr-util-nss",
            "red_hat_enterprise_linux_7:apr-util-odbc",
            "red_hat_enterprise_linux_7:apr-util-openssl",
            "red_hat_enterprise_linux_7:apr-util-pgsql",
            "red_hat_enterprise_linux_7:apr-util-sqlite",
            "red_hat_enterprise_linux_7:apr-util.src",
            "red_hat_enterprise_linux_8:apr-util",
            "red_hat_enterprise_linux_8:apr-util-bdb",
            "red_hat_enterprise_linux_8:apr-util-devel",
            "red_hat_enterprise_linux_8:apr-util-ldap",
            "red_hat_enterprise_linux_8:apr-util-mysql",
            "red_hat_enterprise_linux_8:apr-util-odbc",
            "red_hat_enterprise_linux_8:apr-util-openssl",
            "red_hat_enterprise_linux_8:apr-util-pgsql",
            "red_hat_enterprise_linux_8:apr-util-sqlite",
            "red_hat_enterprise_linux_8:apr-util.src",
            "red_hat_enterprise_linux_9:apr-util",
            "red_hat_enterprise_linux_9:apr-util-bdb",
            "red_hat_enterprise_linux_9:apr-util-devel",
            "red_hat_enterprise_linux_9:apr-util-ldap",
            "red_hat_enterprise_linux_9:apr-util-mysql",
            "red_hat_enterprise_linux_9:apr-util-odbc",
            "red_hat_enterprise_linux_9:apr-util-openssl",
            "red_hat_enterprise_linux_9:apr-util-pgsql",
            "red_hat_enterprise_linux_9:apr-util-sqlite",
            "red_hat_enterprise_linux_9:apr-util.src"
          ]
        },
        {
          "category": "no_fix_planned",
          "details": "Out of support scope",
          "product_ids": [
            "red_hat_enterprise_linux_6:apr-util",
            "red_hat_enterprise_linux_6:apr-util-devel",
            "red_hat_enterprise_linux_6:apr-util-ldap",
            "red_hat_enterprise_linux_6:apr-util-mysql",
            "red_hat_enterprise_linux_6:apr-util-odbc",
            "red_hat_enterprise_linux_6:apr-util-pgsql",
            "red_hat_enterprise_linux_6:apr-util-sqlite",
            "red_hat_enterprise_linux_6:apr-util.src"
          ]
        },
        {
          "category": "none_available",
          "details": "Affected",
          "product_ids": [
            "red_hat_enterprise_linux_10:apr-util-devel",
            "red_hat_enterprise_linux_10:apr-util-ldap",
            "red_hat_enterprise_linux_10:apr-util-lmdb",
            "red_hat_enterprise_linux_10:apr-util-mysql",
            "red_hat_enterprise_linux_10:apr-util-odbc",
            "red_hat_enterprise_linux_10:apr-util-openssl",
            "red_hat_enterprise_linux_10:apr-util-pgsql",
            "red_hat_enterprise_linux_10:apr-util-sqlite",
            "red_hat_enterprise_linux_10:apr-util.src",
            "red_hat_enterprise_linux_7:apr-util",
            "red_hat_enterprise_linux_7:apr-util-devel",
            "red_hat_enterprise_linux_7:apr-util-ldap",
            "red_hat_enterprise_linux_7:apr-util-mysql",
            "red_hat_enterprise_linux_7:apr-util-nss",
            "red_hat_enterprise_linux_7:apr-util-odbc",
            "red_hat_enterprise_linux_7:apr-util-openssl",
            "red_hat_enterprise_linux_7:apr-util-pgsql",
            "red_hat_enterprise_linux_7:apr-util-sqlite",
            "red_hat_enterprise_linux_7:apr-util.src",
            "red_hat_enterprise_linux_8:apr-util",
            "red_hat_enterprise_linux_8:apr-util-bdb",
            "red_hat_enterprise_linux_8:apr-util-devel",
            "red_hat_enterprise_linux_8:apr-util-ldap",
            "red_hat_enterprise_linux_8:apr-util-mysql",
            "red_hat_enterprise_linux_8:apr-util-odbc",
            "red_hat_enterprise_linux_8:apr-util-openssl",
            "red_hat_enterprise_linux_8:apr-util-pgsql",
            "red_hat_enterprise_linux_8:apr-util-sqlite",
            "red_hat_enterprise_linux_8:apr-util.src",
            "red_hat_enterprise_linux_9:apr-util",
            "red_hat_enterprise_linux_9:apr-util-bdb",
            "red_hat_enterprise_linux_9:apr-util-devel",
            "red_hat_enterprise_linux_9:apr-util-ldap",
            "red_hat_enterprise_linux_9:apr-util-mysql",
            "red_hat_enterprise_linux_9:apr-util-odbc",
            "red_hat_enterprise_linux_9:apr-util-openssl",
            "red_hat_enterprise_linux_9:apr-util-pgsql",
            "red_hat_enterprise_linux_9:apr-util-sqlite",
            "red_hat_enterprise_linux_9:apr-util.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:apr-util-main@aarch64",
            "Red Hat Hardened Images:apr-util-main@src",
            "Red Hat Hardened Images:apr-util-main@x86_64",
            "red_hat_enterprise_linux_10:apr-util-devel",
            "red_hat_enterprise_linux_10:apr-util-ldap",
            "red_hat_enterprise_linux_10:apr-util-lmdb",
            "red_hat_enterprise_linux_10:apr-util-mysql",
            "red_hat_enterprise_linux_10:apr-util-odbc",
            "red_hat_enterprise_linux_10:apr-util-openssl",
            "red_hat_enterprise_linux_10:apr-util-pgsql",
            "red_hat_enterprise_linux_10:apr-util-sqlite",
            "red_hat_enterprise_linux_10:apr-util.src",
            "red_hat_enterprise_linux_6:apr-util",
            "red_hat_enterprise_linux_6:apr-util-devel",
            "red_hat_enterprise_linux_6:apr-util-ldap",
            "red_hat_enterprise_linux_6:apr-util-mysql",
            "red_hat_enterprise_linux_6:apr-util-odbc",
            "red_hat_enterprise_linux_6:apr-util-pgsql",
            "red_hat_enterprise_linux_6:apr-util-sqlite",
            "red_hat_enterprise_linux_6:apr-util.src",
            "red_hat_enterprise_linux_7:apr-util",
            "red_hat_enterprise_linux_7:apr-util-devel",
            "red_hat_enterprise_linux_7:apr-util-ldap",
            "red_hat_enterprise_linux_7:apr-util-mysql",
            "red_hat_enterprise_linux_7:apr-util-nss",
            "red_hat_enterprise_linux_7:apr-util-odbc",
            "red_hat_enterprise_linux_7:apr-util-openssl",
            "red_hat_enterprise_linux_7:apr-util-pgsql",
            "red_hat_enterprise_linux_7:apr-util-sqlite",
            "red_hat_enterprise_linux_7:apr-util.src",
            "red_hat_enterprise_linux_8:apr-util",
            "red_hat_enterprise_linux_8:apr-util-bdb",
            "red_hat_enterprise_linux_8:apr-util-devel",
            "red_hat_enterprise_linux_8:apr-util-ldap",
            "red_hat_enterprise_linux_8:apr-util-mysql",
            "red_hat_enterprise_linux_8:apr-util-odbc",
            "red_hat_enterprise_linux_8:apr-util-openssl",
            "red_hat_enterprise_linux_8:apr-util-pgsql",
            "red_hat_enterprise_linux_8:apr-util-sqlite",
            "red_hat_enterprise_linux_8:apr-util.src",
            "red_hat_enterprise_linux_9:apr-util",
            "red_hat_enterprise_linux_9:apr-util-bdb",
            "red_hat_enterprise_linux_9:apr-util-devel",
            "red_hat_enterprise_linux_9:apr-util-ldap",
            "red_hat_enterprise_linux_9:apr-util-mysql",
            "red_hat_enterprise_linux_9:apr-util-odbc",
            "red_hat_enterprise_linux_9:apr-util-openssl",
            "red_hat_enterprise_linux_9:apr-util-pgsql",
            "red_hat_enterprise_linux_9:apr-util-sqlite",
            "red_hat_enterprise_linux_9:apr-util.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "Red Hat Hardened Images:apr-util-main@aarch64",
            "Red Hat Hardened Images:apr-util-main@src",
            "Red Hat Hardened Images:apr-util-main@x86_64",
            "red_hat_enterprise_linux_10:apr-util-devel",
            "red_hat_enterprise_linux_10:apr-util-ldap",
            "red_hat_enterprise_linux_10:apr-util-lmdb",
            "red_hat_enterprise_linux_10:apr-util-mysql",
            "red_hat_enterprise_linux_10:apr-util-odbc",
            "red_hat_enterprise_linux_10:apr-util-openssl",
            "red_hat_enterprise_linux_10:apr-util-pgsql",
            "red_hat_enterprise_linux_10:apr-util-sqlite",
            "red_hat_enterprise_linux_10:apr-util.src",
            "red_hat_enterprise_linux_6:apr-util",
            "red_hat_enterprise_linux_6:apr-util-devel",
            "red_hat_enterprise_linux_6:apr-util-ldap",
            "red_hat_enterprise_linux_6:apr-util-mysql",
            "red_hat_enterprise_linux_6:apr-util-odbc",
            "red_hat_enterprise_linux_6:apr-util-pgsql",
            "red_hat_enterprise_linux_6:apr-util-sqlite",
            "red_hat_enterprise_linux_6:apr-util.src",
            "red_hat_enterprise_linux_7:apr-util",
            "red_hat_enterprise_linux_7:apr-util-devel",
            "red_hat_enterprise_linux_7:apr-util-ldap",
            "red_hat_enterprise_linux_7:apr-util-mysql",
            "red_hat_enterprise_linux_7:apr-util-nss",
            "red_hat_enterprise_linux_7:apr-util-odbc",
            "red_hat_enterprise_linux_7:apr-util-openssl",
            "red_hat_enterprise_linux_7:apr-util-pgsql",
            "red_hat_enterprise_linux_7:apr-util-sqlite",
            "red_hat_enterprise_linux_7:apr-util.src",
            "red_hat_enterprise_linux_8:apr-util",
            "red_hat_enterprise_linux_8:apr-util-bdb",
            "red_hat_enterprise_linux_8:apr-util-devel",
            "red_hat_enterprise_linux_8:apr-util-ldap",
            "red_hat_enterprise_linux_8:apr-util-mysql",
            "red_hat_enterprise_linux_8:apr-util-odbc",
            "red_hat_enterprise_linux_8:apr-util-openssl",
            "red_hat_enterprise_linux_8:apr-util-pgsql",
            "red_hat_enterprise_linux_8:apr-util-sqlite",
            "red_hat_enterprise_linux_8:apr-util.src",
            "red_hat_enterprise_linux_9:apr-util",
            "red_hat_enterprise_linux_9:apr-util-bdb",
            "red_hat_enterprise_linux_9:apr-util-devel",
            "red_hat_enterprise_linux_9:apr-util-ldap",
            "red_hat_enterprise_linux_9:apr-util-mysql",
            "red_hat_enterprise_linux_9:apr-util-odbc",
            "red_hat_enterprise_linux_9:apr-util-openssl",
            "red_hat_enterprise_linux_9:apr-util-pgsql",
            "red_hat_enterprise_linux_9:apr-util-sqlite",
            "red_hat_enterprise_linux_9:apr-util.src"
          ]
        }
      ],
      "title": "apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client"
    }
  ]
}