CVE-2010-1623

CVE-2010-1623

Published · Updated

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 20%
exploitation probability
20%top 3% of all CVEs
observed exploitation
nono source reports it
Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.
Affected products
n/a · n/a
References
http://blogs.sun.com/security/entry/cve_2010_1623_memory_leakhttp://lists.fedoraproject.org/pipermail/package-announce/2010-October/049885.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-October/049939.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.htmlhttp://marc.info/?l=bugtraq&m=130168502603566&w=2http://secunia.com/advisories/41701http://secunia.com/advisories/42015http://secunia.com/advisories/42361http://secunia.com/advisories/42367http://secunia.com/advisories/42403http://secunia.com/advisories/42537http://secunia.com/advisories/43211