CVE-2010-4057

Опубликовано: 23 окт. 2010

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing many integer fields with two different values, which allows remote attackers to cause a denial of service (invalid memory access and daemon crash) via a TCP session on port 1315.

Ссылки

http://aluigi.altervista.org/adv/soliddb_1-adv.txt
Exploit
http://secunia.com/advisories/41873
Vendor Advisory
http://securitytracker.com/id?1024597
http://www.exploit-db.com/exploits/15261
Exploit
http://www.vupen.com/english/advisories/2010/2715
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/62590
http://aluigi.altervista.org/adv/soliddb_1-adv.txt
Exploit
http://secunia.com/advisories/41873
Vendor Advisory
http://securitytracker.com/id?1024597
http://www.exploit-db.com/exploits/15261
Exploit
http://www.vupen.com/english/advisories/2010/2715
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/62590

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:soliddb:*:*:*:*:*:*:*:*

Версия до 6.5.0.3 (включая)

cpe:2.3:a:ibm:soliddb:4.5.167:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.168:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.169:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.173:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.175:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.176:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:4.5.178:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.0.1060:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.0.1061:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.0.1064:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.0.1065:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.0.1066:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.1.20:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.3.33:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.3.37:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.30.0039:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.30.0040:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:6.30.0044:*:*:*:*:*:*:*

cpe:2.3:a:ibm:soliddb:06.30.0047:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.18912

Средний

5 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

GHSA-x7rm-43v9-j38p

github

больше 3 лет назад