CVE-2010-3198
Zope Denial of Service (DoS) vulnerability in ZServer
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
Exploit likelihood
What each source reports
NVD Score used
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
- Record
CVE-2010-3198- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
- Record
CVE-2010-3198- Updated
- 2026-11-02
EUVDEUVD-2010-0032 No score
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
- Record
EUVD-2010-0032- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qh4q-fwf8-qqrw
Zope Denial of Service (DoS) vulnerability in ZServer
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
- Record
GHSA-qh4q-fwf8-qqrw- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
OSVGHSA-qh4q-fwf8-qqrw
Zope Denial of Service (DoS) vulnerability in ZServer
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
- Record
GHSA-qh4q-fwf8-qqrw- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
OSVPYSEC-2010-32 No score
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
- Record
PYSEC-2010-32- Updated
- 2026-11-02
OSVPYSEC-2010-33 No score
Withdrawn as duplicate of PYSEC-2010-32 ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
- Record
PYSEC-2010-33- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3198 is a medium vulnerability (CVSS 4.3) in Zope, published September 8, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.54%, the 75th percentile. Fixed in zope 2.10.12.
References
zope.org/Products/Zope/2.10.12/CHANGES.txt
vupen.com/english/advisories/2010/2275
mail.zope.org/pipermail/zope-announce/2010-September/002247.html
securityfocus.com/bid/42939
bugs.launchpad.net/zope2/+bug/627988
Show 8 moreShow less
nvd.nist.gov/vuln/detail/CVE-2010-3198
github.com/zopefoundation/Zope/commit/0f2f56f63e4a4d695ee670e02b317e900550dbac
web.archive.org/web/20200229173503/http://www.securityfocus.com/bid/42939