Lucene search

K
cve[email protected]CVE-2010-3495
HistoryOct 19, 2010 - 8:00 p.m.

CVE-2010-3495

2010-10-1920:00:04
CWE-362
web.nvd.nist.gov
27
cve-2010-3495
zeo
storageserver.py
zodb
denial of service
remote attackers

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.3 High

AI Score

Confidence

High

0.038 Low

EPSS

Percentile

91.9%

Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, a related issue to CVE-2010-3492.

Affected configurations

NVD
Node
zopezodbRange3.9.7
OR
zopezodbMatch2.8.11
OR
zopezodbMatch2.9.11
OR
zopezodbMatch2.10.9
OR
zopezodbMatch2.11.4
OR
zopezodbMatch3.1
OR
zopezodbMatch3.1.1
OR
zopezodbMatch3.2
OR
zopezodbMatch3.2.4
OR
zopezodbMatch3.3
OR
zopezodbMatch3.3.3
OR
zopezodbMatch3.4
OR
zopezodbMatch3.4.1
OR
zopezodbMatch3.5
OR
zopezodbMatch3.6
OR
zopezodbMatch3.7
OR
zopezodbMatch3.8
OR
zopezodbMatch3.8.0
OR
zopezodbMatch3.8.1
OR
zopezodbMatch3.8.2
OR
zopezodbMatch3.8.6
OR
zopezodbMatch3.9.0
OR
zopezodbMatch3.9.0b1
OR
zopezodbMatch3.9.0b2
OR
zopezodbMatch3.9.0b3
OR
zopezodbMatch3.9.0b4
OR
zopezodbMatch3.9.0b5
OR
zopezodbMatch3.9.0c1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.3 High

AI Score

Confidence

High

0.038 Low

EPSS

Percentile

91.9%