CVE-2010-4265

State: Published
Severity: Not scored
Published: Dec 30, 2010
Updated: Aug 7, 2024
Reserved: Nov 16, 2010

Description

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09 allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data, related to a missing CVE-2010-3862 patch. NOTE: this can be considered a duplicate of CVE-2010-3862 because a missing patch should not be assigned a separate CVE identifier.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://issues.jboss.org/browse/JBPAPP-5253
1024840vdb-entry
https://issues.jboss.org/browse/JBREM-1261
RHSA-2010:0965vendor-advisory
RHSA-2010:0964vendor-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=660623

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.