CVE-2010-3083 in Enterprise MRG

Summary

sys/ssl/SslSocket.cpp in qpidd in Apache Qpid, as used in Red Hat Enterprise MRG before 1.2.2 and other products, when SSL is enabled, allows remote attackers to cause a denial of service (daemon outage) by connecting to the SSL port but not participating in an SSL handshake.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 08/20/2010
• Disclosure: 10/12/2010
• Moderation: VulDB entry created
• Entries: VDB-54967 (1)
• CPE: ready
• CWE: CWE-404 (Confirmed)
• CVSS: 5.3
• EPSS: 0.01785
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2010-3083
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2010-3083
• CVE Details: https://www.cvedetails.com/cve/CVE-2010-3083/