CVE-2010-1623

Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
VendorProductVersion
apacheapr-util
𝑥
≤ 1.3.9
apacheapr-util
0.9.1
apacheapr-util
0.9.2
apacheapr-util
0.9.3
apacheapr-util
0.9.4
apacheapr-util
0.9.5
apacheapr-util
0.9.6
apacheapr-util
0.9.7
apacheapr-util
0.9.8
apacheapr-util
0.9.9
apacheapr-util
0.9.10
apacheapr-util
0.9.11
apacheapr-util
0.9.12
apacheapr-util
0.9.13
apacheapr-util
0.9.14
apacheapr-util
0.9.15
apacheapr-util
0.9.16
apacheapr-util
0.9.17
apacheapr-util
0.9.18
apacheapr-util
1.0
apacheapr-util
1.0.1
apacheapr-util
1.0.2
apacheapr-util
1.1.0
apacheapr-util
1.1.1
apacheapr-util
1.1.2
apacheapr-util
1.2.1
apacheapr-util
1.2.2
apacheapr-util
1.2.6
apacheapr-util
1.2.7
apacheapr-util
1.2.8
apacheapr-util
1.2.9
apacheapr-util
1.2.10
apacheapr-util
1.2.12
apacheapr-util
1.2.13
apacheapr-util
1.3.0
apacheapr-util
1.3.1
apacheapr-util
1.3.2
apacheapr-util
1.3.3
apacheapr-util
1.3.4
apacheapr-util
1.3.5
apacheapr-util
1.3.6
apacheapr-util
1.3.7
apacheapr-util
1.3.8
apachehttp_server
2.0.35 ≤
𝑥
< 2.0.64
apachehttp_server
2.2.0 ≤
𝑥
< 2.2.17
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
apache2
bullseye
2.4.62-1~deb11u1
fixed
lenny
not-affected
bullseye (security)
2.4.62-1~deb11u2
fixed
bookworm
2.4.62-1~deb12u1
fixed
bookworm (security)
2.4.62-1~deb12u2
fixed
sid
2.4.62-3
fixed
trixie
2.4.62-3
fixed
apr-util
bullseye (security)
1.6.1-5+deb11u1
fixed
bullseye
1.6.1-5+deb11u1
fixed
lenny
not-affected
bookworm
1.6.3-1
fixed
sid
1.6.3-3
fixed
trixie
1.6.3-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
apache2
maverick
Fixed 2.2.16-1ubuntu3.1
released
lucid
not-affected
karmic
not-affected
jaunty
not-affected
hardy
not-affected
dapper
Fixed 2.0.55-4ubuntu2.12
released
apr-util
maverick
Fixed 1.3.9+dfsg-3ubuntu0.10.10.1
released
lucid
Fixed 1.3.9+dfsg-3ubuntu0.10.04.1
released
karmic
Fixed 1.3.9+dfsg-1ubuntu1.1
released
jaunty
ignored
hardy
Fixed 1.2.12+dfsg-3ubuntu0.3
released
dapper
dne
References