exploitDog

CVE-2010-4594

Опубликовано: 22 дек. 2010

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly process TCP connection requests, which allows remote attackers to cause a denial of service (memory consumption and HTTP-AS hang) by making many connection requests that trigger "queue size delta errors," related to a "timing hole" issue.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:lotus_mobile_connect:*:*:*:*:*:*:*:*

Версия до 6.1.3 (включая)

cpe:2.3:a:ibm:lotus_mobile_connect:6.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_mobile_connect:6.1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:lotus_mobile_connect:6.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00535

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-xc6x-4p9c-5pvr

github

больше 3 лет назад

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly process TCP connection requests, which allows remote attackers to cause a denial of service (memory consumption and HTTP-AS hang) by making many connection requests that trigger "queue size delta errors," related to a "timing hole" issue.

EPSS

Процентиль: 67%

0.00535

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-399