VDB
CVE-2010-4265
CVE-2010-4265
PUBLISHED
CVSS 2.5999999046325684 LOW
The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09 allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data, related to a missing CVE-2010-3862 patch. NOTE: this can be considered a duplicate of CVE-2010-3862 because a missing patch should not be assigned a separate CVE identifier.
EPSS 2.13% · 81.8th percentile
Risk Scores
CVSS 2.0
2.5999999046325684
EPSS Score
2.13%
81.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
| redhat | jboss_remoting | 2.2.0, 2.2.2, 2.2.2 |
| redhat | jboss_enterprise_web_platform | 5.1.0 |
| redhat | jboss_enterprise_application_platform | 4.3.0, 4.3.0, 4.3.0 |
Timeline
- Dec 30, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 30, 2023 EPSS Score
- Jul 22, 2023 EPSS Score
- Sep 13, 2023 EPSS Score
References
- https://issues.jboss.org/browse/JBREM-1261 url
- RHSA-2010:0965 vendor-advisory
- RHSA-2010:0964 vendor-advisory
- https://issues.jboss.org/browse/JBPAPP-5253 url
- https://nvd.nist.gov/vuln/detail/CVE-2010-4265 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=660623 technical
- http://securitytracker.com/id?1024840 technical