CVE-2010-1623: Buffer Overflow
Memory leak in the aprbrigadesplitline function in buckets/aprbrigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the modreqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1623?
CVE-2010-1623 has a severity rating that indicates it can cause denial of service due to memory leaks.
How do I fix CVE-2010-1623?
To fix CVE-2010-1623, upgrade the Apache Portable Runtime Utility library to version 1.3.10 or later.
Which software is affected by CVE-2010-1623?
CVE-2010-1623 affects Apache Portable Runtime Utility library versions before 1.3.10, including several versions of mod_reqtimeout in the Apache HTTP Server.
Can CVE-2010-1623 be exploited remotely?
Yes, CVE-2010-1623 can be exploited by remote attackers to disrupt service through a denial of service attack.
What are the versions of Apache APR impacted by CVE-2010-1623?
CVE-2010-1623 impacts various versions of Apache APR including 1.3.6, 1.2.13, 1.3.3, and several earlier versions.