CVE-2010-3198

ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.

Affected Software

Name	Vendor	Start Version	End Version
Zope	Zope	2.10.0-b1 (including)	2.10.0-b1 (including)
Zope	Zope	2.10.0-b2 (including)	2.10.0-b2 (including)
Zope	Zope	2.10.0-c1 (including)	2.10.0-c1 (including)
Zope	Zope	2.10.0-final (including)	2.10.0-final (including)
Zope	Zope	2.10.2 (including)	2.10.2 (including)
Zope	Zope	2.10.2-b1 (including)	2.10.2-b1 (including)
Zope	Zope	2.10.2-final (including)	2.10.2-final (including)
Zope	Zope	2.10.3 (including)	2.10.3 (including)
Zope	Zope	2.10.3-final (including)	2.10.3-final (including)
Zope	Zope	2.10.4-final (including)	2.10.4-final (including)
Zope	Zope	2.10.5 (including)	2.10.5 (including)
Zope	Zope	2.10.6 (including)	2.10.6 (including)
Zope	Zope	2.10.7 (including)	2.10.7 (including)
Zope	Zope	2.10.8 (including)	2.10.8 (including)
Zope	Zope	2.10.9 (including)	2.10.9 (including)
Zope	Zope	2.10.10 (including)	2.10.10 (including)
Zope	Zope	2.10.11 (including)	2.10.11 (including)
Zope	Zope	2.11.0 (including)	2.11.0 (including)
Zope	Zope	2.11.0a1 (including)	2.11.0a1 (including)
Zope	Zope	2.11.0b1 (including)	2.11.0b1 (including)
Zope	Zope	2.11.0c1 (including)	2.11.0c1 (including)
Zope	Zope	2.11.1 (including)	2.11.1 (including)
Zope	Zope	2.11.2 (including)	2.11.2 (including)
Zope	Zope	2.11.3 (including)	2.11.3 (including)
Zope	Zope	2.11.4 (including)	2.11.4 (including)
Zope	Zope	2.11.5 (including)	2.11.5 (including)
Zope	Zope	2.11.6 (including)	2.11.6 (including)
Zope2.10	Ubuntu	hardy	*
Zope2.10	Ubuntu	jaunty	*
Zope2.10	Ubuntu	karmic	*
Zope2.10	Ubuntu	upstream	*
Zope2.11	Ubuntu	karmic	*
Zope2.11	Ubuntu	upstream	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2010-3198
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References