Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2002-1942
imatix
xitami
2.5
b5
keep-alive
termination
vulnerability
remote attackers
denial of service
crash
concurrent sessions
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.2 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.4%
Imatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive connections that have been broken or closed early, which allows remote attackers to cause a denial of service (crash) via a large number of concurrent sessions.
Affected configurations
Node
imatixxitamiMatch2.5_b5
| CPE | Name | Operator | Version |
|---|---|---|---|
| imatix:xitami | imatix xitami | eq | 2.5_b5 |
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.2 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.4%
Related for CVE-2002-1942