p PatchFirst

CVE-2010-0434

CVE-2010-0434

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request.

EPSS 18.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • apache2 Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.2.15-1

    Update to 2.2.15-1

  • apache2 Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.2.15-1

    Update to 2.2.15-1

  • apache2 Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.2.15-1

    Update to 2.2.15-1

Original sources

Check your server →