Lucene search
MitreCVE-2010-4057HistoryOct 23, 2010 - 8:39 p.m.
CVE-2010-4057
2010-10-2320:39:05
CWE-189
mitre
web.nvd.nist.gov
23
cve-2010-4057
ibm soliddb
denial of service
remote attackers
tcp session
port 1315
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.5
Confidence
Low
EPSS
0.025
Percentile
90.2%
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing many integer fields with two different values, which allows remote attackers to cause a denial of service (invalid memory access and daemon crash) via a TCP session on port 1315.
Affected configurations
Node
ibmsoliddbRange≤6.5.0.3
ORibmsoliddbMatch4.5.167
ORibmsoliddbMatch4.5.168
ORibmsoliddbMatch4.5.169
ORibmsoliddbMatch4.5.173
ORibmsoliddbMatch4.5.175
ORibmsoliddbMatch4.5.176
ORibmsoliddbMatch4.5.178
ORibmsoliddbMatch6.0.1060
ORibmsoliddbMatch6.0.1061
ORibmsoliddbMatch6.0.1064
ORibmsoliddbMatch6.0.1065
ORibmsoliddbMatch6.0.1066
ORibmsoliddbMatch6.1
ORibmsoliddbMatch6.1.20
ORibmsoliddbMatch6.3.33
ORibmsoliddbMatch6.3.37
ORibmsoliddbMatch6.5.0.0
ORibmsoliddbMatch6.5.0.1
ORibmsoliddbMatch6.5.0.2
ORibmsoliddbMatch6.30.0039
ORibmsoliddbMatch6.30.0040
ORibmsoliddbMatch6.30.0044
ORibmsoliddbMatch06.30.0047
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | soliddb | * | cpe:2.3:a:ibm:soliddb:*:*:*:*:*:*:*:* |
| ibm | soliddb | 4.5.167 | cpe:2.3:a:ibm:soliddb:4.5.167:*:*:*:*:*:*:* |
| ibm | soliddb | 4.5.168 | cpe:2.3:a:ibm:soliddb:4.5.168:*:*:*:*:*:*:* |
| ibm | soliddb | 4.5.169 | cpe:2.3:a:ibm:soliddb:4.5.169:*:*:*:*:*:*:* |
| ibm | soliddb | 4.5.173 | cpe:2.3:a:ibm:soliddb:4.5.173:*:*:*:*:*:*:* |
| ibm | soliddb | 4.5.175 | cpe:2.3:a:ibm:soliddb:4.5.175:*:*:*:*:*:*:* |
| ibm | soliddb | 4.5.176 | cpe:2.3:a:ibm:soliddb:4.5.176:*:*:*:*:*:*:* |
| ibm | soliddb | 4.5.178 | cpe:2.3:a:ibm:soliddb:4.5.178:*:*:*:*:*:*:* |
| ibm | soliddb | 6.0.1060 | cpe:2.3:a:ibm:soliddb:6.0.1060:*:*:*:*:*:*:* |
| ibm | soliddb | 6.0.1061 | cpe:2.3:a:ibm:soliddb:6.0.1061:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2010-4057
2010-10-23 20:39:05
prion
prion
Design/Logic Flaw
2010-10-23 20:39:00
cvelist
cvelist
CVE-2010-4057
2010-10-22 22:00:00
openvas
openvas
IBM solidDB Packets Processing Denial of Service Vulnerabilities
2011-04-11 00:00:00
IBM solidDB Multiple Denial of Service Vulnerabilities
2010-10-19 00:00:00
IBM solidDB Packets Processing Denial of Service Vulnerabilities
2011-04-11 00:00:00
nessus
nessus
IBM solidDB 6.5 < 6.5.0.8 Multiple Denial of Service Vulnerabilities
2012-02-23 00:00:00
IBM Solid Database 6.5 < 6.5.0.8 Multiple Denial of Service Vulnerabilities
2012-02-23 00:00:00
exploitdb
exploitdb
IBM solidDB 6.5.0.3 - Denial of Service
2010-10-15 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.5
Confidence
Low
EPSS
0.025
Percentile
90.2%
Related for CVE-2010-4057