Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistRedhatCVELIST:CVE-2010-0434
HistoryMar 05, 2010 - 7:00 p.m.

CVE-2010-0434

2010-03-0519:00:00
redhat
www.cve.org
6

AI Score

9

Confidence

High

EPSS

0.003

Percentile

70.4%

JSON

The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.

References

Related

veracode 1
seebug 1
nessus 28
openvas 28
ubuntucve 1
oraclelinux 2
redhat 3
securityvulns 5
centos 2
nvd 1
f5 2
debiancve 1
cve 1
httpd 2
prion 1
osv 1
debian 2
ubuntu 1
fedora 3
vmware 2
kaspersky 2
gentoo 1
oracle 1
veracode
veracode
Information Disclosure
2020-04-10 00:47:47
seebug
seebug
Apache 2.2.x子请求处理信息泄露漏洞
2010-03-23 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : apache (MDVSA-2010:057)
2010-03-08 00:00:00
CentOS 4 : httpd (CESA-2010:0175)
2010-03-29 00:00:00
Scientific Linux Security Update : httpd on SL4.x i386/x86_64
2012-08-01 00:00:00
openvas
openvas
CentOS Update for httpd CESA-2010:0175 centos4 i386
2010-03-31 00:00:00
Mandriva Update for nuface MDVA-2010:057 (nuface)
2010-02-15 00:00:00
Mandriva Update for apache MDVSA-2010:057 (apache)
2010-03-12 00:00:00
ubuntucve
ubuntucve
CVE-2010-0434
2010-03-05 00:00:00
oraclelinux
oraclelinux
httpd security, bug fix, and enhancement update
2010-03-25 00:00:00
httpd security and enhancement update
2010-03-25 00:00:00
redhat
redhat
(RHSA-2010:0175) Low: httpd security, bug fix, and enhancement update
2010-03-25 00:00:00
(RHSA-2010:0396) Moderate: httpd and httpd22 security and enhancement update
2010-05-05 00:00:00
(RHSA-2010:0168) Moderate: httpd security and enhancement update
2010-03-25 00:00:00
securityvulns
securityvulns
[ MDVSA-2010:057 ] apache
2010-03-09 00:00:00
Apache HTTPD information leak
2010-03-09 00:00:00
Apple Mac OS X and QuickTime multiple security vulnerabilities
2013-11-18 00:00:00
centos
centos
httpd, mod_ssl security update
2010-03-28 20:51:15
httpd, mod_ssl security update
2010-03-28 15:40:00
nvd
nvd
CVE-2010-0434
2010-03-05 19:30:00
f5
f5
SOL40284849 - Apache vulnerability CVE-2010-0434
2015-12-23 00:00:00
K40284849 : Apache vulnerability CVE-2010-0434
2015-12-23 00:00:00
debiancve
debiancve
CVE-2010-0434
2010-03-05 19:30:00
cve
cve
CVE-2010-0434
2010-03-05 19:30:00
httpd
httpd
Apache Httpd < 2.0.64 : Subrequest handling of request headers (mod_headers)
2009-12-09 00:00:00
Apache Httpd < 2.2.15 : Subrequest handling of request headers (mod_headers)
2009-12-09 00:00:00
prion
prion
Design/Logic Flaw
2010-03-05 19:30:00
osv
osv
apache2 - several issues
2010-04-17 00:00:00
debian
debian
[SECURITY] [DSA-2035-1] New apache2 packages fix several issues
2010-04-17 20:58:14
[SECURITY] [DSA-2035-1] New apache2 packages fix several issues
2010-04-17 20:58:14
ubuntu
ubuntu
Apache vulnerabilities
2010-03-10 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: httpd-2.2.15-1.fc11.1
2010-05-04 06:06:43
[SECURITY] Fedora 12 Update: httpd-2.2.15-1.fc12.2
2010-05-31 18:25:29
[SECURITY] Fedora 13 Update: httpd-2.2.15-1.fc13
2010-04-22 22:51:41
vmware
vmware
VMware Workstation, Player, and ACE address several security issues.
2010-09-23 00:00:00
VMware Workstation, Player, and ACE address several security issues.
2010-09-23 00:00:00
kaspersky
kaspersky
KLA10386 Multiple vulnerabilities in VMware
2010-09-23 00:00:00
KLA10066 Multiple vulnerabilities in Apache httpd
2010-10-19 00:00:00
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2012-06-24 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00

AI Score

9

Confidence

High

EPSS

0.003

Percentile

70.4%

JSON
Related for CVELIST:CVE-2010-0434
veracode1seebug1nessus28openvas28ubuntucve1oraclelinux2redhat3securityvulns5centos2nvd1f52debiancve1cve1httpd2prion1osv1debian2ubuntu1fedora3vmware2kaspersky2gentoo1oracle1