CVE-2010-4265
Last modified
CVE-2010-4265 is a vulnerability of currently unknown severity. The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09 allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data, related to a missing CVE-2010-3862 patch. NOTE: this can be considered a duplicate of CVE-2010-3862 because a missing patch should not be assigned a separate CVE identifier.. EPSS estimates a 2.13% chance of exploitation in the next 30 days.
Description
The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09 allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data, related to a missing CVE-2010-3862 patch. NOTE: this can be considered a duplicate of CVE-2010-3862 because a missing patch should not be assigned a separate CVE identifier.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Redhat | Jboss Remoting | 2.2.0 | — |
| Redhat | Jboss Remoting | 2.2.2 | Sp10 |
| Redhat | Jboss Remoting | 2.2.3 | — |
| Redhat | Jboss Enterprise Application Platform | 4.3.0 | — |
| Redhat | Jboss Enterprise Application Platform | 5.1.0 | — |
| Redhat | Jboss Enterprise Web Platform | 5.1.0 | — |
References
- http://www.redhat.com/support/errata/RHSA-2010-0964.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0965.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0964.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0965.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-4265?
How severe is CVE-2010-4265?
How do I fix CVE-2010-4265?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-4259Stack-based buffer overflow in FontForge 20100501 allows rem…
- CVE-2010-4260Multiple unspecified vulnerabilities in pdf.c in libclamav i…
- CVE-2010-4261Off-by-one error in the icon_cb function in pe_icons.c in li…
- CVE-2010-4262Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows r…
- CVE-2010-4263The igb_receive_skb function in drivers/net/igb/igb_main.c i…
- CVE-2010-4264It was found in vanilla forums before 2.0.10 a cross-site sc…6.1
- CVE-2010-4266It was found in vanilla forums before 2.0.10 a potential lin…6.1
- CVE-2010-4267Stack-based buffer overflow in the hpmud_get_pml function in…
- CVE-2010-4268SQL injection vulnerability in the Pulse Infotech Flip Wall …
- CVE-2010-4269SQL injection vulnerability in managechat.php in Collabtive …
- CVE-2010-4270Directory traversal vulnerability in the nBill (com_netinvoi…
- CVE-2010-4271SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 a…
Are you affected by CVE-2010-4265?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST