CVE-2010-3862 - CVE House

Back to Database

Status published Low CVE-2010-3862

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and...

2.6 CVSS

Vulnerability Description

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterprise Web Platform (aka JBEWP) 5.1.0; allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-3862

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from redhat

View All →

drools <=7.59.x is affected by an XML External Entity (XXE)...

vg_lookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to...

XSS in the admin help system admin/help.html and admin/quicklinks.html in...

An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt...

Pagure 5.2 leaks API keys by e-mailing them to users....

Affected Vendor

redhat

View all reports →

Affected Software

jboss remoting, jboss enterprise application platform, jboss enterprise web platform

Vulnerable Versions:

2.2.0, 2.2.2, 2.2.3, 4.3.0, 5.1.0

Timeline

Official Publish: December 30th, 2010

Last Modified: August 7th, 2024

Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.