Lucene search
HistoryOct 03, 2022 - 4:21 p.m.
CVE-2010-2725
cve-2010-2725
barnowl
denial of service
libzephyr
remote attackers
arbitrary code
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.9%
BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
Affected configurations
Node
barnowlbarnowlRange≤1.6.1
ORbarnowlbarnowlMatch1.0.0
ORbarnowlbarnowlMatch1.0.1
ORbarnowlbarnowlMatch1.0.2
ORbarnowlbarnowlMatch1.0.2.1
ORbarnowlbarnowlMatch1.0.3
ORbarnowlbarnowlMatch1.0.4
ORbarnowlbarnowlMatch1.0.4.1
ORbarnowlbarnowlMatch1.0.5
ORbarnowlbarnowlMatch1.1
ORbarnowlbarnowlMatch1.1.1
ORbarnowlbarnowlMatch1.2
ORbarnowlbarnowlMatch1.2.1
ORbarnowlbarnowlMatch1.3
ORbarnowlbarnowlMatch1.4
ORbarnowlbarnowlMatch1.4rc1
ORbarnowlbarnowlMatch1.5
ORbarnowlbarnowlMatch1.5rc1
ORbarnowlbarnowlMatch1.5rc2
ORbarnowlbarnowlMatch1.5.1
ORbarnowlbarnowlMatch1.6
Related
prion
prion
Code injection
2010-08-05 13:23:00
ubuntucve
ubuntucve
CVE-2010-2725
2010-08-05 00:00:00
securityvulns
securityvulns
barnowl uninitialized memory reference
2010-09-06 00:00:00
[SECURITY] [DSA-2102-1] New barnowl packages fix arbitrary code execution
2010-09-06 00:00:00
nvd
nvd
CVE-2010-2725
2010-08-05 13:23:09
debiancve
debiancve
CVE-2010-2725
2022-10-03 16:21:07
nessus
nessus
Debian DSA-2102-1 : barnowl - unchecked return value
2010-09-04 00:00:00
debian
debian
[SECURITY] [DSA-2102-1] New barnowl packages fix arbitrary code execution
2010-09-03 10:13:50
openvas
openvas
Debian: Security Advisory (DSA-2102-1)
2023-03-08 00:00:00
cvelist
cvelist
CVE-2010-2725
2022-10-03 16:21:07
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.9%
Related for CVE-2010-2725