PT-2010-5012 · Red Hat · Red Hat Enterprise Mrg

Vincent Danen · Published 2010-10-12 · Updated 2021-07-15 · CVE-2010-3701

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise MRG versions prior to 1.2.2

Description The issue allows remote authenticated users to cause a denial of service, resulting in stack memory exhaustion and broker crash, by sending a large persistent message.

Recommendations For versions prior to 1.2.2, update to version 1.2.2 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2010-3701

RHSA-2010:0756

RHSA-2010:0757

Affected Products

Red Hat Enterprise Mrg

References · 5

• https://bugzilla.redhat.com/show_bug.cgi?id=634014 · Patch
• http://redhat.com/support/errata/RHSA-2010-0756.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2010-0757.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3701 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=640006 · Note