CVEvulnerability
CVE-2010-3198
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-09-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Description
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
Affected configurations
• zope zope 2.10.0-b1
• zope zope 2.10.0-b2
• zope zope 2.10.0-c1
• zope zope 2.10.0-final
• zope zope 2.10.2
• zope zope 2.10.2-b1
• zope zope 2.10.2-final
• zope zope 2.10.3
• zope zope 2.10.3-final
• zope zope 2.10.4-final
• zope zope 2.10.5
• zope zope 2.10.6
• zope zope 2.10.7
• zope zope 2.10.8
• zope zope 2.10.9
• zope zope 2.10.10
• zope zope 2.10.11
• zope zope 2.11.0
• zope zope 2.11.0a1
• zope zope 2.11.0b1
• zope zope 2.11.0c1
• zope zope 2.11.1
• zope zope 2.11.2
• zope zope 2.11.3
• zope zope 2.11.4
• zope zope 2.11.5
• zope zope 2.11.6
References
- http://www.securityfocus.com/bid/42939 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/2275 Vendor Advisory
- http://www.zope.org/Products/Zope/2.10.12/CHANGES.txt www.zope.org
- http://www.zope.org/Products/Zope/2.11.7/CHANGES.txt www.zope.org
- https://bugs.launchpad.net/zope2/+bug/627988 Exploit, Patch, Vendor Advisory
- https://mail.zope.org/pipermail/zope-announce/2010-September/002247.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/42939 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/2275 Vendor Advisory
- http://www.zope.org/Products/Zope/2.10.12/CHANGES.txt www.zope.org
- http://www.zope.org/Products/Zope/2.11.7/CHANGES.txt www.zope.org
- https://bugs.launchpad.net/zope2/+bug/627988 Exploit, Patch, Vendor Advisory
- https://mail.zope.org/pipermail/zope-announce/2010-September/002247.html Patch, Vendor Advisory