Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.
2010-02-02T16:30:02.437
2025-04-11T00:51:21.963
Deferred
CVSSv2: 6.8 (MEDIUM)
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.6
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | apache | http_server | ≤ 1.3.41 | Yes |
| Application | apache | http_server | 0.8.11 | Yes |
| Application | apache | http_server | 0.8.14 | Yes |
| Application | apache | http_server | 1.0 | Yes |
| Application | apache | http_server | 1.0.3 | Yes |
| Application | apache | http_server | 1.0.5 | Yes |
| Application | apache | http_server | 1.1 | Yes |
| Application | apache | http_server | 1.2 | Yes |
| Application | apache | http_server | 1.2.4 | Yes |
| Application | apache | http_server | 1.2.5 | Yes |
| Application | apache | http_server | 1.2.6 | Yes |
| Application | apache | http_server | 1.3 | Yes |
| Application | apache | http_server | 1.3.0 | Yes |
| Application | apache | http_server | 1.3.1 | Yes |
| Application | apache | http_server | 1.3.2 | Yes |
| Application | apache | http_server | 1.3.3 | Yes |
| Application | apache | http_server | 1.3.4 | Yes |
| Application | apache | http_server | 1.3.10 | Yes |
| Application | apache | http_server | 1.3.11 | Yes |
| Application | apache | http_server | 1.3.12 | Yes |
| Application | apache | http_server | 1.3.13 | Yes |
| Application | apache | http_server | 1.3.14 | Yes |
| Application | apache | http_server | 1.3.15 | Yes |
| Application | apache | http_server | 1.3.17 | Yes |
| Application | apache | http_server | 1.3.18 | Yes |
| Application | apache | http_server | 1.3.19 | Yes |
| Application | apache | http_server | 1.3.20 | Yes |
| Application | apache | http_server | 1.3.22 | Yes |
| Application | apache | http_server | 1.3.23 | Yes |
| Application | apache | http_server | 1.3.24 | Yes |
| Application | apache | http_server | 1.3.25 | Yes |
| Application | apache | http_server | 1.3.26 | Yes |
| Application | apache | http_server | 1.3.27 | Yes |
| Application | apache | http_server | 1.3.28 | Yes |
| Application | apache | http_server | 1.3.29 | Yes |
| Application | apache | http_server | 1.3.30 | Yes |
| Application | apache | http_server | 1.3.31 | Yes |
| Application | apache | http_server | 1.3.32 | Yes |
| Application | apache | http_server | 1.3.33 | Yes |
| Application | apache | http_server | 1.3.34 | Yes |
| Application | apache | http_server | 1.3.35 | Yes |
| Application | apache | http_server | 1.3.36 | Yes |
| Application | apache | http_server | 1.3.37 | Yes |
| Application | apache | http_server | 1.3.38 | Yes |
| Application | apache | http_server | 1.3.39 | Yes |
| Application | apache | http_server | 1.3.40 | Yes |