Information disclosure in Apache HTTP Server
CVE-2010-0434
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.
Vulnerability class: Information Disclosure
Published · last modified .
CVSS v2 metric
CVSS v2 base score 4.3 (Medium). Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.184 (97.2th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 97th percentile — 97.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.184 · newest: 0.184 · change: 0.000
Affected products
- Apache HTTP Server
- Debian Linux — versions 5.0, 6.0
- Fedoraproject Fedora — versions 11, 13
Weakness classification (CWE)
Public proof-of-concept exploits
References
- httpd.apache.org/security/vulnerabilities_22.html (Patch, Vendor Advisory)
- lists.apple.com/archives/security-announce/2010//Nov/msg00000.html (vendor-advisory, Mailing List, Broken Link)
- lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.html (vendor-advisory, Mailing List, Third Party Advisory)
- lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html (vendor-advisory, Mailing List, Third Party Advisory)
- lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html (vendor-advisory, Mailing List, Third Party Advisory)
- lists.vmware.com/pipermail/security-announce/2010/000105.html (mailing-list, Mailing List, Third Party Advisory)
- marc.info/ (vendor-advisory, Mailing List, Third Party Advisory, Issue Tracking)
- secunia.com/advisories/39100 (Not Applicable, third-party-advisory)
- secunia.com/advisories/39115 (Not Applicable, third-party-advisory)
- secunia.com/advisories/39501 (Not Applicable, third-party-advisory)
Frequently asked questions
- What is CVE-2010-0434?
- CVE-2010-0434 is a vulnerability in Apache HTTP Server, classified under Information Disclosure. Published 2010-03-05.
- Is CVE-2010-0434 known to be exploited?
- 22 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.