# CVEs published 2010-10-04

6 CVEs were published on October 4, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1623](https://cve.now/CVE-2010-1623.md): Memory leak in the apr\_brigade\_split\_line function in buckets/apr\_brigade.c in the Apache Portable Runtime Utility library (aka APR-util) be (no CVSS)
- [CVE-2010-1822](https://cve.now/CVE-2010-1822.md): WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3 and Google Chrome before 6.0.472.62, does not properly perform a cast of (no CVSS)
- [CVE-2010-3315](https://cve.now/CVE-2010-3315.md): authz.c in the mod\_dav\_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13 (no CVSS)
- [CVE-2010-3374](https://cve.now/CVE-2010-3374.md): Qt Creator before 2.0.1 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a Trojan (no CVSS)
- [CVE-2010-3437](https://cve.now/CVE-2010-3437.md): Integer signedness error in the pkt\_find\_dev\_from\_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows loc (no CVSS)
- [CVE-2010-3442](https://cve.now/CVE-2010-3442.md): Multiple integer overflows in the snd\_ctl\_new function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow loc (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-10-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.