CVE-2010-0010: Apache HTTP Server

Medium severity, CVSS 6.8. EPSS: 43.4% chance of exploitation in the next 30 days.

Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.

Affected products

• Apache HTTP Server: up to and including 1.3.41; version 0.8.11 only; version 0.8.14 only; version 1.0 only; version 1.0.3 only; version 1.0.5 only; …

Published 2010-02-02. Last modified 2026-06-16.