Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-1623
HistoryOct 04, 2010 - 9:00 p.m.

CVE-2010-1623

2010-10-0421:00:03
CWE-119
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

Low

0.425 Medium

EPSS

Percentile

97.3%

JSON

Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.

Affected configurations

NVD
Node
apacheapr-utilRange≤1.3.9
OR
apacheapr-utilMatch0.9.1
OR
apacheapr-utilMatch0.9.2
OR
apacheapr-utilMatch0.9.3
OR
apacheapr-utilMatch0.9.4
OR
apacheapr-utilMatch0.9.5
OR
apacheapr-utilMatch0.9.6
OR
apacheapr-utilMatch0.9.7
OR
apacheapr-utilMatch0.9.8
OR
apacheapr-utilMatch0.9.9
OR
apacheapr-utilMatch0.9.10
OR
apacheapr-utilMatch0.9.11
OR
apacheapr-utilMatch0.9.12
OR
apacheapr-utilMatch0.9.13
OR
apacheapr-utilMatch0.9.14
OR
apacheapr-utilMatch0.9.15
OR
apacheapr-utilMatch0.9.16
OR
apacheapr-utilMatch0.9.17
OR
apacheapr-utilMatch0.9.18
OR
apacheapr-utilMatch1.0
OR
apacheapr-utilMatch1.0.1
OR
apacheapr-utilMatch1.0.2
OR
apacheapr-utilMatch1.1.0
OR
apacheapr-utilMatch1.1.1
OR
apacheapr-utilMatch1.1.2
OR
apacheapr-utilMatch1.2.1
OR
apacheapr-utilMatch1.2.2
OR
apacheapr-utilMatch1.2.6
OR
apacheapr-utilMatch1.2.7
OR
apacheapr-utilMatch1.2.8
OR
apacheapr-utilMatch1.2.9
OR
apacheapr-utilMatch1.2.10
OR
apacheapr-utilMatch1.2.12
OR
apacheapr-utilMatch1.2.13
OR
apacheapr-utilMatch1.3.0
OR
apacheapr-utilMatch1.3.1
OR
apacheapr-utilMatch1.3.2
OR
apacheapr-utilMatch1.3.3
OR
apacheapr-utilMatch1.3.4
OR
apacheapr-utilMatch1.3.5
OR
apacheapr-utilMatch1.3.6
OR
apacheapr-utilMatch1.3.7
OR
apacheapr-utilMatch1.3.8
Node
apachehttp_serverRange2.0.35–2.0.64
OR
apachehttp_serverRange2.2.0–2.2.17

References

Related

redhat 2
openvas 32
fedora 3
f5 2
veracode 1
nessus 28
cve 1
ubuntu 2
prion 1
httpd 2
ubuntucve 2
oraclelinux 1
debian 2
debiancve 1
cvelist 1
slackware 2
centos 1
freebsd 1
gentoo 1
suse 1
kaspersky 1
hackerone 1
redhat
redhat
(RHSA-2010:0950) Moderate: apr-util security update
2010-12-07 00:00:00
(RHSA-2011:0897) Moderate: JBoss Enterprise Web Server 1.0.2 update
2011-06-22 00:00:00
openvas
openvas
Fedora Update for apr-util FEDORA-2010-16178
2010-12-02 00:00:00
Apache APR-util 'buckets/apr_brigade.c' Denial Of Service Vulnerability
2010-10-07 00:00:00
Mandriva Update for apr-util MDVSA-2010:192 (apr-util)
2010-10-04 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: apr-util-1.3.10-1.fc12
2010-10-28 05:58:28
[SECURITY] Fedora 13 Update: apr-util-1.3.10-1.fc13
2010-10-28 05:47:25
[SECURITY] Fedora 14 Update: apr-util-1.3.10-1.fc14
2010-11-10 01:19:10
f5
f5
K15902 : Apache vulnerability CVE-2010-1623
2015-09-16 00:00:00
SOL15902 - Apache vulnerability CVE-2010-1623
2014-12-11 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:51:33
nessus
nessus
Fedora 14 : apr-util-1.3.10-1.fc14 (2010-16178)
2010-11-10 00:00:00
F5 Networks BIG-IP : Apache vulnerability (SOL15902)
2015-09-16 00:00:00
Debian DSA-2117-1 : apr-util - denial of service
2010-10-06 00:00:00
cve
cve
CVE-2010-1623
2010-10-04 21:00:03
ubuntu
ubuntu
APR-util vulnerability
2010-11-25 00:00:00
Apache vulnerabilities
2010-11-25 00:00:00
prion
prion
Design/Logic Flaw
2010-10-04 21:00:00
httpd
httpd
Apache Httpd < 2.0.64 : apr_bridage_split_line DoS
2010-03-03 00:00:00
Apache Httpd < 2.2.17 : apr_bridage_split_line DoS
2010-03-03 00:00:00
ubuntucve
ubuntucve
CVE-2010-1623
2010-10-04 00:00:00
CVE-2007-6750
2011-12-27 00:00:00
oraclelinux
oraclelinux
apr-util security update
2010-12-07 00:00:00
debian
debian
[SECURITY] [DSA-2117-1] New apr-util packages fix denial of service
2010-10-04 21:35:18
[SECURITY] [DSA-2117-1] New apr-util packages fix denial of service
2010-10-04 21:35:18
debiancve
debiancve
CVE-2010-1623
2010-10-04 21:00:03
cvelist
cvelist
CVE-2010-1623
2010-10-04 20:00:00
slackware
slackware
[slackware-security] apr-util
2011-02-11 01:16:50
[slackware-security] httpd
2011-02-11 01:17:26
centos
centos
apr security update
2011-01-27 08:46:39
freebsd
freebsd
apr -- multiple vunerabilities
2010-10-02 00:00:00
gentoo
gentoo
Apache Portable Runtime, APR Utility Library: Denial of service
2014-05-18 00:00:00
suse
suse
Security update for apache2 (important)
2011-11-09 19:08:34
kaspersky
kaspersky
KLA10066 Multiple vulnerabilities in Apache httpd
2010-10-19 00:00:00
hackerone
hackerone
U.S. Dept Of Defense: Out-of-date Version (Apache)
2016-11-24 15:09:27

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

Low

0.425 Medium

EPSS

Percentile

97.3%

JSON
Related for NVD:CVE-2010-1623
redhat2openvas32fedora3f52veracode1nessus28cve1ubuntu2prion1httpd2ubuntucve2oraclelinux1debian2debiancve1cvelist1slackware2centos1freebsd1gentoo1suse1kaspersky1hackerone1