NVD

Id
14874  
Name
CVE-2010-3495  
Description
Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, a related issue to CVE-2010-3492.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-10-19  
Modified Date
2011-01-22  
Seq
2010-3495  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
82438 14874 CVE-2010-3495 http://bugs.python.org/issue6706  View
82439 14874 CVE-2010-3495 SUSE-SR:2010:024  View
82440 14874 CVE-2010-3495 http://pypi.python.org/pypi/ZODB3/3.10.0#id1  View
82441 14874 CVE-2010-3495 [oss-security] 20100909 CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
82442 14874 CVE-2010-3495 [oss-security] 20100910 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
82443 14874 CVE-2010-3495 [oss-security] 20100922 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
82444 14874 CVE-2010-3495 [oss-security] 20100924 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
82445 14874 CVE-2010-3495 https://bugs.launchpad.net/zodb/+bug/135108  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36663 JVNDB-2010-002443 Zope Object Database の ZEO/StorageServer.py におけるサービス運用妨害 (DoS) の脆弱性 Zope Object Database の ZEO/StorageServer.py には、競合状態が発生するため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-3495 46075 CVE-2010-3495 14874 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002443.html 2010-10-19 2010-12-06 View