NetSight
IP …
medium5.0

CVE-2010-1623

Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as use…

Impact

Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.

Affected products

VendorProductAffected versions
ApacheApr-Util
through 1.3.9
Versions 0.9.1, 0.9.2, 0.9.3, 0.9.4, 0.9.5
ApacheHttp Server
from 2.0.35 before 2.0.64
from 2.2.0 before 2.2.17

Weakness classification

CWE-119

References