Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:24285
HistoryApr 10, 2020 - 12:51 a.m.

Denial Of Service (DoS)

2020-04-1000:51:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

0.425 Medium

EPSS

Percentile

97.3%

JSON

apr-util is vulnerable to denial of service. It was found that certain input could cause the apr-util library to allocate more memory than intended in the apr_brigade_split_line() function. An attacker able to provide input in small chunks to an application using the apr-util library (such as httpd) could possibly use this flaw to trigger high memory consumption.

References

Related

cve 1
openvas 32
ubuntu 2
prion 1
nessus 28
httpd 2
nvd 1
ubuntucve 2
oraclelinux 1
fedora 3
debian 2
f5 2
debiancve 1
cvelist 1
slackware 2
centos 1
redhat 2
freebsd 1
gentoo 1
suse 1
kaspersky 1
hackerone 1
cve
cve
CVE-2010-1623
2010-10-04 21:00:03
openvas
openvas
Fedora Update for apr-util FEDORA-2010-15953
2010-11-04 00:00:00
Slackware: Security Advisory (SSA:2011-041-01)
2012-09-10 00:00:00
RedHat Update for apr-util RHSA-2010:0950-01
2010-12-23 00:00:00
ubuntu
ubuntu
APR-util vulnerability
2010-11-25 00:00:00
Apache vulnerabilities
2010-11-25 00:00:00
prion
prion
Design/Logic Flaw
2010-10-04 21:00:00
nessus
nessus
Debian DSA-2117-1 : apr-util - denial of service
2010-10-06 00:00:00
CentOS 4 : apr-util (CESA-2010:0950)
2011-01-28 00:00:00
RHEL 4 / 5 / 6 : apr-util (RHSA-2010:0950)
2010-12-08 00:00:00
httpd
httpd
Apache Httpd < 2.0.64 : apr_bridage_split_line DoS
2010-03-03 00:00:00
Apache Httpd < 2.2.17 : apr_bridage_split_line DoS
2010-03-03 00:00:00
nvd
nvd
CVE-2010-1623
2010-10-04 21:00:03
ubuntucve
ubuntucve
CVE-2010-1623
2010-10-04 00:00:00
CVE-2007-6750
2011-12-27 00:00:00
oraclelinux
oraclelinux
apr-util security update
2010-12-07 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: apr-util-1.3.10-1.fc14
2010-11-10 01:19:10
[SECURITY] Fedora 12 Update: apr-util-1.3.10-1.fc12
2010-10-28 05:58:28
[SECURITY] Fedora 13 Update: apr-util-1.3.10-1.fc13
2010-10-28 05:47:25
debian
debian
[SECURITY] [DSA-2117-1] New apr-util packages fix denial of service
2010-10-04 21:35:18
[SECURITY] [DSA-2117-1] New apr-util packages fix denial of service
2010-10-04 21:35:18
f5
f5
SOL15902 - Apache vulnerability CVE-2010-1623
2014-12-11 00:00:00
K15902 : Apache vulnerability CVE-2010-1623
2015-09-16 00:00:00
debiancve
debiancve
CVE-2010-1623
2010-10-04 21:00:03
cvelist
cvelist
CVE-2010-1623
2010-10-04 20:00:00
slackware
slackware
[slackware-security] apr-util
2011-02-11 01:16:50
[slackware-security] httpd
2011-02-11 01:17:26
centos
centos
apr security update
2011-01-27 08:46:39
redhat
redhat
(RHSA-2010:0950) Moderate: apr-util security update
2010-12-07 00:00:00
(RHSA-2011:0897) Moderate: JBoss Enterprise Web Server 1.0.2 update
2011-06-22 00:00:00
freebsd
freebsd
apr -- multiple vunerabilities
2010-10-02 00:00:00
gentoo
gentoo
Apache Portable Runtime, APR Utility Library: Denial of service
2014-05-18 00:00:00
suse
suse
Security update for apache2 (important)
2011-11-09 19:08:34
kaspersky
kaspersky
KLA10066 Multiple vulnerabilities in Apache httpd
2010-10-19 00:00:00
hackerone
hackerone
U.S. Dept Of Defense: Out-of-date Version (Apache)
2016-11-24 15:09:27

0.425 Medium

EPSS

Percentile

97.3%

JSON
Related for VERACODE:24285
cve1openvas32ubuntu2prion1nessus28httpd2nvd1ubuntucve2oraclelinux1fedora3debian2f52debiancve1cvelist1slackware2centos1redhat2freebsd1gentoo1suse1kaspersky1hackerone1