Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:24285
HistoryApr 10, 2020 - 12:51 a.m.

Denial Of Service (DoS)

2020-04-1000:51:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

apr-util is vulnerable to denial of service. It was found that certain input could cause the apr-util library to allocate more memory than intended in the apr_brigade_split_line() function. An attacker able to provide input in small chunks to an application using the apr-util library (such as httpd) could possibly use this flaw to trigger high memory consumption.

References

Related

openvas 30
fedora 3
nessus 26
redhat 2
f5 2
debian 2
slackware 2
centos 1
oraclelinux 1
httpd 2
ubuntucve 2
prion 1
cve 1
ubuntu 2
debiancve 1
freebsd 1
gentoo 1
suse 1
kaspersky 1
hackerone 1
openvas
openvas
Mandriva Update for apr-util MDVSA-2010:192 (apr-util)
2010-10-04 00:00:00
Apache APR-util 'buckets/apr_brigade.c' Denial Of Service Vulnerability
2010-10-07 00:00:00
CentOS Update for apr-util CESA-2010:0950 centos4 i386
2011-01-31 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: apr-util-1.3.10-1.fc13
2010-10-28 05:47:25
[SECURITY] Fedora 12 Update: apr-util-1.3.10-1.fc12
2010-10-28 05:58:28
[SECURITY] Fedora 14 Update: apr-util-1.3.10-1.fc14
2010-11-10 01:19:10
nessus
nessus
Fedora 14 : apr-util-1.3.10-1.fc14 (2010-16178)
2010-11-10 00:00:00
F5 Networks BIG-IP : Apache vulnerability (SOL15902)
2015-09-16 00:00:00
Scientific Linux Security Update : apr-util on SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
redhat
redhat
(RHSA-2010:0950) Moderate: apr-util security update
2010-12-07 00:00:00
(RHSA-2011:0897) Moderate: JBoss Enterprise Web Server 1.0.2 update
2011-06-22 00:00:00
f5
f5
K15902 : Apache vulnerability CVE-2010-1623
2015-09-16 00:00:00
SOL15902 - Apache vulnerability CVE-2010-1623
2014-12-11 00:00:00
debian
debian
[SECURITY] [DSA-2117-1] New apr-util packages fix denial of service
2010-10-04 21:35:18
[SECURITY] [DSA-2117-1] New apr-util packages fix denial of service
2010-10-04 21:35:18
slackware
slackware
[slackware-security] apr-util
2011-02-11 01:16:50
[slackware-security] httpd
2011-02-11 01:17:26
centos
centos
apr security update
2011-01-27 08:46:39
oraclelinux
oraclelinux
apr-util security update
2010-12-07 00:00:00
httpd
httpd
Apache Httpd < 2.0.64 : apr_bridage_split_line DoS
2010-03-03 00:00:00
Apache Httpd < 2.2.17 : apr_bridage_split_line DoS
2010-03-03 00:00:00
ubuntucve
ubuntucve
CVE-2010-1623
2010-10-04 00:00:00
CVE-2007-6750
2011-12-27 00:00:00
prion
prion
Design/Logic Flaw
2010-10-04 21:00:00
cve
cve
CVE-2010-1623
2010-10-04 21:00:00
ubuntu
ubuntu
APR-util vulnerability
2010-11-25 00:00:00
Apache vulnerabilities
2010-11-25 00:00:00
debiancve
debiancve
CVE-2010-1623
2010-10-04 21:00:00
freebsd
freebsd
apr -- multiple vunerabilities
2010-10-02 00:00:00
gentoo
gentoo
Apache Portable Runtime, APR Utility Library: Denial of service
2014-05-18 00:00:00
suse
suse
Security update for apache2 (important)
2011-11-09 19:08:34
kaspersky
kaspersky
KLA10066 Multiple vulnerabilities in Apache httpd
2010-10-19 00:00:00
hackerone
hackerone
U.S. Dept Of Defense: Out-of-date Version (Apache)
2016-11-24 15:09:27

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON
Related for VERACODE:24285
openvas30fedora3nessus26redhat2f52debian2slackware2centos1oraclelinux1httpd2ubuntucve2prion1cve1ubuntu2debiancve1freebsd1gentoo1suse1kaspersky1hackerone1