Approved changes feed: RSS · Atom

cpe:2.3:a:apache:apr-util:0.9.17:*:*:*:*:*:*:*

part: a version: 0.9.17 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductApr Util (2804f1c4-2d92-5696-95e5-5903a5b9387b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/apr purl2cpe 2026-06-01 10:14:31.830551
pkg:github/apache/apr-util purl2cpe 2026-06-01 10:14:31.830552
pkg:gitlab/redhat/apr-util purl2cpe 2026-06-01 10:14:31.830554
pkg:maven/org.apache.apr/apr purl2cpe 2026-06-01 10:14:31.830555
pkg:rpm/centos/apr-util purl2cpe 2026-06-01 10:14:31.830556
pkg:rpm/fedora/apr-util purl2cpe 2026-06-01 10:14:31.830558
pkg:rpm/opensuse/apr-util purl2cpe 2026-06-01 10:14:31.830559

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-1623 vulnerable 2026-06-08 04:54:09.380098 Details available
Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors related to the destruction of an APR bucket.
Published: 2010-10-04T20:00:00.000Z
Updated: 2024-08-07T01:28:43.040Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.