CVE-2010-1623
apr-util - denial of service
EPSS 20.2%
描述
Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.
如何修補 CVE-2010-1623
要修補 CVE-2010-1623,請將受影響套件升級到下列已修補版本。
- Debian/apache2—升級至 2.2.16-3 或更新版本
- Debian/apr-util—升級至 1.3.9+dfsg-4 或更新版本
- —升級至 1.2.12+dfsg-8+lenny5 或更新版本
CVE-2010-1623 正在被利用嗎?
中等 — EPSS 為 20.2%,可持續追蹤但非最高優先。
受影響套件(3)
- from 0, < 2.2.16-3
- from 0, < 1.3.9+dfsg-4
- from 0, < 1.2.12+dfsg-8+lenny5