{"action":"Upgrade apr-util to 1.3.9+dfsg-4 or later.","affected":[{"fixed":"1.3.9+dfsg-4","introduced":"0"}],"component":"apr-util","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.3.9+dfsg-4"],"id":"tcs_01M5N9HGJQKCEHT4YQ8F0J8JN0","modified_at":"2026-10-23T17:47:43.204542972Z","published_at":"2010-10-04T21:00:03.627Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2010-1623","https://security-tracker.debian.org/tracker/CVE-2010-1623"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2010-1623#Debian:14/apr-util","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2010-1623"}],"summary":"Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) before 1.3.10, as used in the mod_reqtimeout module in the Apa"}