UpHeron
All vulnerabilities

Servers and applications

CVE-2010-0010

Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.

Severity
Medium 6.8
Published
2 Feb 2010
Last changed
16 Jun 2026
Added to UpHeron
17 Oct 2026
Exploit chance
43% in the next 30 daysHigher than 98% of CVEs. EPSS by FIRST, 12 Nov 2026
Weakness
CWE-189
Attack
Over the network · No login needed
Attacker can
Read some data · Change some data · Slow it down
CVSS vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Sources
NVD

Affected software

SoftwareAffected versions
Apache HTTP ServerServers and applications · cpe:a:apache:http_server
  • Version 1.3.40
  • Version 1.3.39
  • Version 1.3.38
  • Version 1.3.37
All 45 release lines
  • Every version up to 1.3.41
  • Version 0.8.11
  • Version 0.8.14
  • Version 1.0
  • Version 1.0.3
  • Version 1.0.5
  • Version 1.1
  • Version 1.2
  • Version 1.2.4
  • Version 1.2.5
  • Version 1.2.6
  • Version 1.3
  • Version 1.3.1
  • Version 1.3.2
  • Version 1.3.3
  • Version 1.3.4
  • Version 1.3.10
  • Version 1.3.11
  • Version 1.3.12
  • Version 1.3.13
  • Version 1.3.14
  • Version 1.3.15
  • Version 1.3.17
  • Version 1.3.18
  • Version 1.3.19
  • Version 1.3.20
  • Version 1.3.22
  • Version 1.3.23
  • Version 1.3.24
  • Version 1.3.25
  • Version 1.3.26
  • Version 1.3.27
  • Version 1.3.28
  • Version 1.3.29
  • Version 1.3.30
  • Version 1.3.31
  • Version 1.3.32
  • Version 1.3.33
  • Version 1.3.34
  • Version 1.3.35
  • Version 1.3.36
  • Version 1.3.37
  • Version 1.3.38
  • Version 1.3.39
  • Version 1.3.40

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2010-0010
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2010-0010