CVE-2010-3862

JBoss Remoting 2.2.x-2.2.3.SP3 and 2.5.x-2.5.3.SP1 - Denial of Service via Bisocket Control Connection

Title source: llm
STIX 2.1

Description

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterprise Web Platform (aka JBEWP) 5.1.0; allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data.

References (12)

Core 12
Core References
Various Sources x_refsource_misc
https://issues.jboss.org/browse/JBPAPP-5253
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0938.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0960.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0959.html
Various Sources x_refsource_confirm
https://issues.jboss.org/browse/JBREM-1261
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0937.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0961.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0962.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0939.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0963.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1024813

Scores

EPSS 0.0261
EPSS Percentile 83.6%

Details

CWE
CWE-20
Status published
Products (6)
redhat/jboss_enterprise_application_platform 4.3.0 (10 CPE variants)
redhat/jboss_enterprise_application_platform 5.1.0
redhat/jboss_enterprise_web_platform 5.1.0
redhat/jboss_remoting 2.2.0
redhat/jboss_remoting 2.2.2 sp10 (6 CPE variants)
redhat/jboss_remoting 2.2.3 (4 CPE variants)
Published Dec 30, 2010
Tracked Since Feb 18, 2026