CVE-2010-4055

Опубликовано: 23 окт. 2010

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denial of service (memory consumption and daemon crash) by connecting to TCP port 1315 and sending a packet with many integer fields, which trigger many recursive calls of a certain function.

Ссылки

http://aluigi.altervista.org/adv/soliddb_1-adv.txt
Exploit
http://secunia.com/advisories/41873
Vendor Advisory
http://securitytracker.com/id?1024597
http://www.exploit-db.com/exploits/15261
Exploit
http://www.vupen.com/english/advisories/2010/2715
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/62590
http://aluigi.altervista.org/adv/soliddb_1-adv.txt
Exploit
http://secunia.com/advisories/41873
Vendor Advisory
http://securitytracker.com/id?1024597
http://www.exploit-db.com/exploits/15261
Exploit
http://www.vupen.com/english/advisories/2010/2715
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/62590

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:soliddb:*:*:*:*:*:*:*:*

Версия до 6.5.0.3 (включая)

cpe:2.3:a:ibm:soliddb:4.5.167:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.168:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.169:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.173:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.175:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.176:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.178:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:06.00.1018:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.0.1060:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.0.1061:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.0.1064:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.0.1065:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.0.1066:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.1.20:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.3.33:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.3.37:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.30.0039:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.30.0040:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.30.0044:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:06.30.0047:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.18912

Средний

5 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-f7f9-2whw-qx53

github

больше 3 лет назад