Vulnerability in Apache HTTP Server
CVE-2010-0010
Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.
EPSS: 0.434 (98.6th percentile) — read the EPSS interpretation.
Affected products
- Apache Http_server — versions 1.3.20, 1.3.25, 1.3.28
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (mailing-list, Exploit, x_refsource_FULLDISC)
- secalert@redhat.com (x_refsource_MISC)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (x_refsource_HP, vendor-advisory)
- secalert@redhat.com (Exploit, x_refsource_MISC)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (x_refsource_MISC)
- secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ)