Description

Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.

Remediation

References

CVE-2010-0010

Related Vulnerabilities

Drupal Improper Input Validation Vulnerability (CVE-2012-5653)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-2607)

WordPress Plugin CopySafe PDF Protection Unspecified Vulnerability (1.10)

IBM WebSEAL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1886)

Moodle Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-3809)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2010-0010