CVE-2010-3198
medium
CVSS v3
โ
CVSS v4 NEW
โ
VIR risk
4.3
Description
Zope Denial of Service (DoS) vulnerability in ZServer
Predictions
Exploit likelihood
30%
Patch ETA
โ
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or โ if you've already worked around this in production โ publish your fix to the community-verified tier.
โ Propose a mitigation on Community โ Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| zope | zope | 2.10.0-b1 | |
| zope | zope | 2.10.0-b2 | |
| zope | zope | 2.10.0-c1 | |
| zope | zope | 2.10.0-final | |
| zope | zope | 2.10.2 | |
| zope | zope | 2.10.2-b1 | |
| zope | zope | 2.10.2-final | |
| zope | zope | 2.10.3 | |
| zope | zope | 2.10.3-final | |
| zope | zope | 2.10.4-final | |
| zope | zope | 2.10.5 | |
| zope | zope | 2.10.6 | |
| zope | zope | 2.10.7 | |
| zope | zope | 2.10.8 | |
| zope | zope | 2.10.9 | |
| zope | zope | 2.10.10 | |
| zope | zope | 2.10.11 | |
| zope | zope | 2.11.0 | |
| zope | zope | 2.11.0a1 | |
| zope | zope | 2.11.0b1 | |
| zope | zope | 2.11.0c1 | |
| zope | zope | 2.11.1 | |
| zope | zope | 2.11.2 | |
| zope | zope | 2.11.3 | |
| zope | zope | 2.11.4 | |
| zope | zope | 2.11.5 | |
| zope | zope | 2.11.6 | |
References
- http://www.securityfocus.com/bid/42939
- http://www.vupen.com/english/advisories/2010/2275
- http://www.zope.org/Products/Zope/2.10.12/CHANGES.txt
- http://www.zope.org/Products/Zope/2.11.7/CHANGES.txt
- https://bugs.launchpad.net/zope2/+bug/627988
- https://mail.zope.org/pipermail/zope-announce/2010-September/002247.html
- https://nvd.nist.gov/vuln/detail/CVE-2010-3198
- https://github.com/zopefoundation/Zope/commit/0f2f56f63e4a4d695ee670e02b317e900550dbac
- https://github.com/zopefoundation/Zope/commit/e03a5f036d42ed2426886c9035fe018eeec65de4
- https://github.com/pypa/advisory-database/tree/main/vulns/zope/PYSEC-2010-32.yaml
- https://github.com/zopefoundation/Zope
- https://web.archive.org/web/20200229173503/http://www.securityfocus.com/bid/42939
- https://github.com/pypa/advisory-database/tree/main/vulns/zope/PYSEC-2010-33.yaml
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.