Vulnerability Details CVE-2010-3701
lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users to cause a denial of service (stack memory exhaustion and broker crash) via a large persistent message.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.0%
CVSS Severity
CVSS v2 Score 4.0
References
- http://www.redhat.com/support/errata/RHSA-2010-0756.html
- http://www.redhat.com/support/errata/RHSA-2010-0757.html
- https://bugzilla.redhat.com/show_bug.cgi?id=634014
- https://bugzilla.redhat.com/show_bug.cgi?id=640006
- http://www.redhat.com/support/errata/RHSA-2010-0756.html
- http://www.redhat.com/support/errata/RHSA-2010-0757.html
- https://bugzilla.redhat.com/show_bug.cgi?id=634014
- https://bugzilla.redhat.com/show_bug.cgi?id=640006
Products affected by CVE-2010-3701
-
cpe:2.3:o:redhat:enterprise_mrg:1.0
-
cpe:2.3:o:redhat:enterprise_mrg:1.0.1
-
cpe:2.3:o:redhat:enterprise_mrg:1.0.2
-
cpe:2.3:o:redhat:enterprise_mrg:1.0.3
-
cpe:2.3:o:redhat:enterprise_mrg:1.1.1
-
cpe:2.3:o:redhat:enterprise_mrg:1.1.2
-
cpe:2.3:o:redhat:enterprise_mrg:1.2