CVE-2010-3701
lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users...
lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users to cause a denial of service (stack memory exhaustion and broker crash) via a large persistent message.
Exploit likelihood
What each source reports
NVD Score used
4.0
lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users to cause a denial of service (stack memory exhaustion and broker crash) via a large persistent message.
- Record
CVE-2010-3701- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users to cause a denial of service (stack memory exhaustion and broker crash) via a large persistent message.
- Record
CVE-2010-3701- Updated
- 2026-11-02
EUVDEUVD-2010-3684 No score
lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users to cause a denial of service (stack memory exhaustion and broker crash) via a large persistent message.
- Record
EUVD-2010-3684- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-49f9-p2h6-xv2f No score
lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users...
lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users to cause a denial of service (stack memory exhaustion and broker crash) via a large persistent message.
- Record
GHSA-49f9-p2h6-xv2f- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
qmfRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el5 | 0:0.5.752581-42.el5 |
qmf-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el5 | 0:0.5.752581-42.el5 |
qpidcRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el5 | 0:0.5.752581-42.el5 |
qpidc-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el5 | 0:0.5.752581-42.el5 |
qpidc-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el5 | 0:0.5.752581-42.el5 |
qpidc-perftestRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el5 | 0:0.5.752581-42.el5 |
qpidc-rdmaRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el5 | 0:0.5.752581-42.el5 |
qpidc-sslRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el5 | 0:0.5.752581-42.el5 |
qpiddRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el5 | 0:0.5.752581-42.el5 |
qpidd-aclRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el5 | 0:0.5.752581-42.el5 |
Show 21 moreShow less
| Package | Affected | Fixed |
|---|---|---|
qpidd-clusterRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el5 | 0:0.5.752581-42.el5 |
qpidd-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el5 | 0:0.5.752581-42.el5 |
qpidd-rdmaRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el5 | 0:0.5.752581-42.el5 |
qpidd-sslRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el5 | 0:0.5.752581-42.el5 |
qpidd-xmlRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el5 | 0:0.5.752581-42.el5 |
rhmRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.3206-36.el5 | 0:0.5.3206-36.el5 |
rhm-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.5.3206-36.el5 | 0:0.5.3206-36.el5 |
qmfRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el4 | 0:0.5.752581-42.el4 |
qmf-develRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el4 | 0:0.5.752581-42.el4 |
qpidcRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el4 | 0:0.5.752581-42.el4 |
qpidc-debuginfoRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el4 | 0:0.5.752581-42.el4 |
qpidc-develRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el4 | 0:0.5.752581-42.el4 |
qpidc-perftestRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el4 | 0:0.5.752581-42.el4 |
qpidc-sslRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el4 | 0:0.5.752581-42.el4 |
qpiddRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el4 | 0:0.5.752581-42.el4 |
qpidd-aclRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el4 | 0:0.5.752581-42.el4 |
qpidd-develRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el4 | 0:0.5.752581-42.el4 |
qpidd-sslRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el4 | 0:0.5.752581-42.el4 |
qpidd-xmlRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.5.752581-42.el4 | 0:0.5.752581-42.el4 |
rhmRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.5.3206-36.el4 | 0:0.5.3206-36.el4 |
rhm-debuginfoRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.5.3206-36.el4 | 0:0.5.3206-36.el4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3701 is a medium vulnerability (CVSS 4.0) in Redhat Enterprise Mrg, published October 12, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. No source names a fixed version.
References
redhat.com/support/errata/RHSA-2010-0756.html
bugzilla.redhat.com/show_bug.cgi?id=634014
bugzilla.redhat.com/show_bug.cgi?id=640006
redhat.com/support/errata/RHSA-2010-0757.html
nvd.nist.gov/vuln/detail/CVE-2010-3701
github.com/advisories/GHSA-49f9-p2h6-xv2f
Show 19 moreShow less
access.redhat.com/errata/RHSA-2010:0756
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=550151
bugzilla.redhat.com/show_bug.cgi?id=560696
bugzilla.redhat.com/show_bug.cgi?id=601222
bugzilla.redhat.com/show_bug.cgi?id=601230
bugzilla.redhat.com/show_bug.cgi?id=601236
bugzilla.redhat.com/show_bug.cgi?id=611907
bugzilla.redhat.com/show_bug.cgi?id=619919
bugzilla.redhat.com/show_bug.cgi?id=632657
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0756.json
access.redhat.com/security/cve/CVE-2010-3083
cve.org/CVERecord?id=CVE-2010-3083
nvd.nist.gov/vuln/detail/CVE-2010-3083
access.redhat.com/security/cve/CVE-2010-3701
cve.org/CVERecord?id=CVE-2010-3701
access.redhat.com/errata/RHSA-2010:0757
bugzilla.redhat.com/show_bug.cgi?id=639054
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0757.json