{"id":"CVE-2010-0010","aliases":["EUVD-2010-0042","GHSA-8xvp-wq7g-q2vj"],"status":"published","title":"Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the...","description":"Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.43421,"percentile":0.98745,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-189"],"published":"2010-02-02T16:25:00Z","modified":"2026-06-16T23:15:13Z","products":[{"vendor":"apache","product":"http_server"}],"references":[{"url":"http://www.vupen.com/english/advisories/2010/0240","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://httpd.apache.org/dev/dist/CHANGES_1.3.42","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=130497311408250\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7923","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://secunia.com/advisories/39656","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/38319","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55941","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0589.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Exploit"]},{"url":"http://blog.pi3.com.pl/?p=69","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/509185/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://site.pi3.com.pl/adv/mod_proxy.txt","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/bid/37966","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://packetstormsecurity.org/1001-exploits/modproxy-overflow.txt","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://www.securitytracker.com/id?1023533","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2010/1001","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0010"},{"url":"https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-8xvp-wq7g-q2vj"}],"sources":{"cve":[{"id":"CVE-2010-0010","description":"Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.","status":"published","published":"2010-02-02T16:25:00Z","modified":"2024-08-07T00:30:46.953Z","updated_at":"2026-11-02T14:33:29.582233Z"}],"euvd":[{"id":"EUVD-2010-0042","description":"Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.","status":"published","published":"2010-02-02T16:25:00Z","modified":"2024-08-07T00:30:46Z","updated_at":"2026-11-03T01:39:47.222761Z"}],"ghsa":[{"id":"GHSA-8xvp-wq7g-q2vj","title":"Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the...","description":"Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.","status":"published","published":"2022-05-02T06:09:42Z","modified":"2025-04-11T03:32:17Z","updated_at":"2026-11-02T15:01:04.319345Z"}],"nvd":[{"id":"CVE-2010-0010","description":"Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.","status":"published","published":"2010-02-02T16:30:02.437Z","modified":"2026-06-16T23:15:13.213Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:01:40.249593Z"}]}}