CVE-2010-3495: zope zodb
Vulnerability summary
CVE-2010-3495 is a medium (CVSS 4.3) vulnerability in zope zodb. EPSS estimates a 1.35% chance of exploitation in the next 30 days, higher than 71.4% of scored vulnerabilities.
Not severe (CVSS 4.3, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Timeline
- 19-10-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, a related issue to CVE-2010-3492.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.35%
Chance of exploitation in the next 30 days
Percentile
71%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.35% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
PyPI1 product
- zodb3< 3.10.0a2 | < 3.10.0a1
Zope1 product
- zodb≤ 3.9.7 | 2.8.11 | 2.9.11 | 2.10.9 | 2.11.4 | 3.1 | 3.1.1 | 3.2 | 3.2.4 | 3.3 | 3.3.3 | 3.4 | 3.4.1 | 3.5 | 3.6 | 3.7 | 3.8 | 3.8.0 | 3.8.1 | 3.8.2 | 3.8.6 | 3.9.0 | 3.9.0b1 | 3.9.0b2 | 3.9.0b3 | 3.9.0b4 | 3.9.0b5 | 3.9.0c1
2 vendors · 2 products
References
15 links- lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.htmlVendor AdvisoryX Refsource SUSEWEB
