CVE-2010-0010
02.02.2010, 16:30
Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apache | http_server | 𝑥 ≤ 1.3.41 |
| apache | http_server | 0.8.11 |
| apache | http_server | 0.8.14 |
| apache | http_server | 1.0 |
| apache | http_server | 1.0.3 |
| apache | http_server | 1.0.5 |
| apache | http_server | 1.1 |
| apache | http_server | 1.2 |
| apache | http_server | 1.2.4 |
| apache | http_server | 1.2.5 |
| apache | http_server | 1.2.6 |
| apache | http_server | 1.3 |
| apache | http_server | 1.3.0 |
| apache | http_server | 1.3.1 |
| apache | http_server | 1.3.2 |
| apache | http_server | 1.3.3 |
| apache | http_server | 1.3.4 |
| apache | http_server | 1.3.10 |
| apache | http_server | 1.3.11 |
| apache | http_server | 1.3.12 |
| apache | http_server | 1.3.13 |
| apache | http_server | 1.3.14 |
| apache | http_server | 1.3.15 |
| apache | http_server | 1.3.17 |
| apache | http_server | 1.3.18 |
| apache | http_server | 1.3.19 |
| apache | http_server | 1.3.20 |
| apache | http_server | 1.3.22 |
| apache | http_server | 1.3.23 |
| apache | http_server | 1.3.24 |
| apache | http_server | 1.3.25 |
| apache | http_server | 1.3.26 |
| apache | http_server | 1.3.27 |
| apache | http_server | 1.3.28 |
| apache | http_server | 1.3.29 |
| apache | http_server | 1.3.30 |
| apache | http_server | 1.3.31 |
| apache | http_server | 1.3.32 |
| apache | http_server | 1.3.33 |
| apache | http_server | 1.3.34 |
| apache | http_server | 1.3.35 |
| apache | http_server | 1.3.36 |
| apache | http_server | 1.3.37 |
| apache | http_server | 1.3.38 |
| apache | http_server | 1.3.39 |
| apache | http_server | 1.3.40 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References