CVE-2010-2759

Bugzilla 2.23.1-3.2.7, 3.3.1-3.4.7, 3.5.1-3.6.1, 3.7-3.7.2 - DoS via Large Integer Handling in PostgreSQL

Title source: llm

Description

Bugzilla 2.23.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2, when PostgreSQL is used, does not properly handle large integers in (1) bug and (2) attachment phrases, which allows remote authenticated users to cause a denial of service (bug invisibility) via a crafted comment.

References (11)

Core 11

Core References

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2010/2035

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/40892

Issue Tracking x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=623423

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/42275

Issue Tracking x_refsource_confirm

https://bugzilla.mozilla.org/show_bug.cgi?id=583690

Issue Tracking x_refsource_confirm

http://www.bugzilla.org/security/3.2.7/

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/41128

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2010/2205

Scores

EPSS 0.0183

EPSS Percentile 76.4%

Details

CWE

CWE-189

Status published

Products (49)

mozilla/bugzilla 2.4

mozilla/bugzilla 2.6

mozilla/bugzilla 2.8

mozilla/bugzilla 2.9

mozilla/bugzilla 2.23.1

mozilla/bugzilla 2.23.2

mozilla/bugzilla 2.23.3

mozilla/bugzilla 2.23.4

mozilla/bugzilla 3.0 (2 CPE variants)

mozilla/bugzilla 3.0.0

... and 39 more

Published Aug 16, 2010

Tracked Since Feb 18, 2026