CVE-2010-0434
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15,...
4.3 MediumFix available
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.
Exploit likelihood
18.4%Up 11.1 points since Feb 4, 2022
What each source reports
NVD Score used
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.
- Record
CVE-2010-0434- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.
- Record
CVE-2010-0434- Updated
- 2026-11-02
EUVDEUVD-2010-0465 No score
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.
- Record
EUVD-2010-0465- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jm28-fmm3-4cr6 No score
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15,...
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.
- Record
GHSA-jm28-fmm3-4cr6- Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.
- Record
CVE-2010-0434- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-0434 No score
The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.
- Record
DEBIAN-CVE-2010-0434- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10268-1 No score
apache2-2.4.23-4.1 on GA media
These are all security issues fixed in the apache2-2.4.23-4.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10268-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apache2Debian:12 |
before 2.2.15-1 | 2.2.15-1 |
apache2Debian:13 |
before 2.2.15-1 | 2.2.15-1 |
apache2Debian:14 |
before 2.2.15-1 | 2.2.15-1 |
apache2Debian:5.0 From an advisory covering 2 CVEs |
before 2.2.9-10+lenny7, plus listed versions 2.2.9-10+lenny22.2.9-10+lenny32.2.9-10+lenny42.2.9-10+lenny52.2.9-10+lenny6 |
2.2.9-10+lenny7 |
httpdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:2.2.3-31.el5_4.4 | 0:2.2.3-31.el5_4.4 |
httpd-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:2.2.3-31.el5_4.4 | 0:2.2.3-31.el5_4.4 |
httpd-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:2.2.3-31.el5_4.4 | 0:2.2.3-31.el5_4.4 |
httpd-manualRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:2.2.3-31.el5_4.4 | 0:2.2.3-31.el5_4.4 |
httpdRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.2.3-31.el5_4.4 | 0:2.2.3-31.el5_4.4 |
httpd-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:2.2.3-31.el5_4.4 | 0:2.2.3-31.el5_4.4 |
Show 83 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mod_sslRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 1:2.2.3-31.el5_4.4 | 1:2.2.3-31.el5_4.4 |
httpdRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.2.3-31.el5_4.4 | 0:2.2.3-31.el5_4.4 |
httpd-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.2.3-31.el5_4.4 | 0:2.2.3-31.el5_4.4 |
httpd-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.2.3-31.el5_4.4 | 0:2.2.3-31.el5_4.4 |
httpd-manualRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:2.2.3-31.el5_4.4 | 0:2.2.3-31.el5_4.4 |
mod_sslRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 1:2.2.3-31.el5_4.4 | 1:2.2.3-31.el5_4.4 |
httpdRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
httpd-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
httpd-develRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
httpd-manualRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
httpd-suexecRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
mod_sslRed Hat:enterprise_linux:4::as |
before 1:2.0.52-41.ent.7 | 1:2.0.52-41.ent.7 |
httpdRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
httpd-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
httpd-develRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
httpd-manualRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
httpd-suexecRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
mod_sslRed Hat:enterprise_linux:4::desktop |
before 1:2.0.52-41.ent.7 | 1:2.0.52-41.ent.7 |
httpdRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
httpd-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
httpd-develRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
httpd-manualRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
httpd-suexecRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
mod_sslRed Hat:enterprise_linux:4::es |
before 1:2.0.52-41.ent.7 | 1:2.0.52-41.ent.7 |
httpdRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
httpd-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
httpd-develRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
httpd-manualRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
httpd-suexecRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.7 | 0:2.0.52-41.ent.7 |
mod_sslRed Hat:enterprise_linux:4::ws |
before 1:2.0.52-41.ent.7 | 1:2.0.52-41.ent.7 |
httpd22Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:2.2.14-11.jdk6.ep5.el4 | 0:2.2.14-11.jdk6.ep5.el4 |
httpd22-aprRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:2.2.14-11.jdk6.ep5.el4 | 0:2.2.14-11.jdk6.ep5.el4 |
httpd22-apr-develRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:2.2.14-11.jdk6.ep5.el4 | 0:2.2.14-11.jdk6.ep5.el4 |
httpd22-apr-utilRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:2.2.14-11.jdk6.ep5.el4 | 0:2.2.14-11.jdk6.ep5.el4 |
httpd22-apr-util-develRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:2.2.14-11.jdk6.ep5.el4 | 0:2.2.14-11.jdk6.ep5.el4 |
httpd22-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:2.2.14-11.jdk6.ep5.el4 | 0:2.2.14-11.jdk6.ep5.el4 |
httpd22-develRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:2.2.14-11.jdk6.ep5.el4 | 0:2.2.14-11.jdk6.ep5.el4 |
httpd22-manualRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:2.2.14-11.jdk6.ep5.el4 | 0:2.2.14-11.jdk6.ep5.el4 |
mod_ssl22Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 1:2.2.14-11.jdk6.ep5.el4 | 1:2.2.14-11.jdk6.ep5.el4 |
httpdRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 2 CVEs |
before 0:2.2.14-1.2.6.jdk6.ep5.el5 | 0:2.2.14-1.2.6.jdk6.ep5.el5 |
httpd-develRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 2 CVEs |
before 0:2.2.14-1.2.6.jdk6.ep5.el5 | 0:2.2.14-1.2.6.jdk6.ep5.el5 |
httpd-manualRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 2 CVEs |
before 0:2.2.14-1.2.6.jdk6.ep5.el5 | 0:2.2.14-1.2.6.jdk6.ep5.el5 |
mod_sslRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 2 CVEs |
before 1:2.2.14-1.2.6.jdk6.ep5.el5 | 1:2.2.14-1.2.6.jdk6.ep5.el5 |
antRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.6.5-1jpp_1rh | 0:1.6.5-1jpp_1rh |
avalon-logkitRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2-2jpp_4rh | 0:1.2-2jpp_4rh |
axisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2.1-1jpp_3rh | 0:1.2.1-1jpp_3rh |
classpathx-jafRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-2jpp_6rh | 0:1.0-2jpp_6rh |
classpathx-mailRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.1.1-2jpp_8rh | 0:1.1.1-2jpp_8rh |
geronimo-ejb-2.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-1.4-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-connector-1.5-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-deployment-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-management-1.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jms-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jta-1.0.1B-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specs-javadocRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
jakarta-commons-modelerRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:2.0-3jpp_2rh | 0:2.0-3jpp_2rh |
log4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2.12-1jpp_1rh | 0:1.2.12-1jpp_1rh |
mx4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 1:3.0.1-1jpp_4rh | 1:3.0.1-1jpp_4rh |
pcsc-liteRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-debuginfoRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-docRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-libsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
rhpki-caRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-20.el4 | 0:7.3.0-20.el4 |
rhpki-java-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-10.el4 | 0:7.3.0-10.el4 |
rhpki-kraRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-14.el4 | 0:7.3.0-14.el4 |
rhpki-manageRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-19.el4 | 0:7.3.0-19.el4 |
rhpki-native-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-6.el4 | 0:7.3.0-6.el4 |
rhpki-ocspRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
rhpki-tksRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
tomcat5Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-common-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasperRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-server-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
xerces-j2Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:2.7.1-1jpp_1rh | 0:2.7.1-1jpp_1rh |
xml-commonsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
xml-commons-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
apache2openSUSE:Tumbleweed From an advisory covering 48 CVEs |
before 2.4.23-4.1 | 2.4.23-4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0434 is a medium vulnerability (CVSS 4.3) in Apache Http Server, published March 5, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 18.4%, the 97th percentile. Fixed in apache2 2.2.15-1.
References
redhat.com/support/errata/RHSA-2010-0175.html
secunia.com/advisories/39115
vupen.com/english/advisories/2010/1411
svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/server/protocol.c?r1=917617&r2=917867&pathrev=917867&diff_format=h
vmware.com/security/advisories/VMSA-2010-0014.html
Show 194 moreShow less
support.apple.com/kb/HT4435
www-01.ibm.com/support/docview.wss?uid=swg1PM12247
lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10358
marc.info?l=bugtraq&m=127557640302499&w=2
issues.apache.org/bugzilla/show_bug.cgi?id=48359
securityfocus.com/bid/38494
oracle.com/technetwork/topics/security/cpujuly2013-1899826.html
exchange.xforce.ibmcloud.com/vulnerabilities/56625
lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html
lists.vmware.com/pipermail/security-announce/2010/000105.html
httpd.apache.org/security/vulnerabilities_22.html
bugzilla.redhat.com/show_bug.cgi?id=570171
debian.org/security/2010/dsa-2035
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2010-0434
github.com/advisories/GHSA-jm28-fmm3-4cr6
security-tracker.debian.org/tracker/CVE-2010-0434
access.redhat.com/errata/RHSA-2010:0168
kbase.redhat.com/faq/docs/DOC-20491
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0168.json
cve.org/CVERecord?id=CVE-2010-0408
suse.com/security/cve/CVE-2009-0023
This page doesn't list everything
Left out here: 104 references. The JSON record has them.