CVE

Id
46079  
CVE No.
CVE-2010-3495  
Status
Candidate  
Description
Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, a related issue to CVE-2010-3492.  
Phase
Assigned (20100924)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
501191 46079 CVE-2010-3495 MLIST:[oss-security] 20100909 CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
501192 46079 CVE-2010-3495 URL:http://www.openwall.com/lists/oss-security/2010/09/09/6  View
501193 46079 CVE-2010-3495 MLIST:[oss-security] 20100910 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
501194 46079 CVE-2010-3495 URL:http://www.openwall.com/lists/oss-security/2010/09/11/2  View
501195 46079 CVE-2010-3495 MLIST:[oss-security] 20100922 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
501196 46079 CVE-2010-3495 URL:http://www.openwall.com/lists/oss-security/2010/09/22/3  View
501197 46079 CVE-2010-3495 MLIST:[oss-security] 20100924 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
501198 46079 CVE-2010-3495 URL:http://www.openwall.com/lists/oss-security/2010/09/24/3  View
501199 46079 CVE-2010-3495 MISC:http://bugs.python.org/issue6706  View
501200 46079 CVE-2010-3495 CONFIRM:http://pypi.python.org/pypi/ZODB3/3.10.0#id1  View
501201 46079 CVE-2010-3495 CONFIRM:https://bugs.launchpad.net/zodb/+bug/135108  View
501202 46079 CVE-2010-3495 SUSE:SUSE-SR:2010:024  View
501203 46079 CVE-2010-3495 URL:http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html  View
501204 46079 CVE-2010-3495 SECUNIA:41755  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28104 JVNDB-2012-003811 F-Secure Anti-Virus における任意のコードを実行される脆弱性 F-Secure Anti-Virus は、hcp:// URL を処理する Microsoft ヘルプとサポート センター (Microsoft Help and Support Center) とのやり取りを適切に行わないため、検知アプローチによるコード実行停止処理に遅れが発生することにより、任意のコードを実行される脆弱性が存在します。 CVE-2010-3499 46079 6.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003811.html  View