CVE-2010-0010: Buffer Overflow
Integer overflow in the approxysendfb function in proxy/proxyutil.c in modproxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0010?
CVE-2010-0010 is categorized as a moderate-severity vulnerability due to its potential to cause a denial of service and possibly allow remote code execution.
How do I fix CVE-2010-0010?
To fix CVE-2010-0010, upgrade to Apache HTTP Server version 1.3.42 or later.
What systems are affected by CVE-2010-0010?
CVE-2010-0010 affects Apache HTTP Server versions prior to 1.3.42 on 64-bit platforms.
What type of vulnerability is CVE-2010-0010?
CVE-2010-0010 is an integer overflow vulnerability in the Apache HTTP Server's mod_proxy module.
Can CVE-2010-0010 lead to remote code execution?
Yes, CVE-2010-0010 can potentially allow an attacker to execute arbitrary code through specially crafted requests.