Every CVE Search/ Get API key

CVE-2010-3862

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run...

2.6 LowFix available

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterprise Web Platform (aka JBEWP) 5.1.0; allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data.

Exploit likelihood

2.61%Up 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.6

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterprise Web Platform (aka JBEWP) 5.1.0; allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data.

Record
CVE-2010-3862
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterprise Web Platform (aka JBEWP) 5.1.0; allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data.

Record
CVE-2010-3862
Updated
2026-11-02
EUVDEUVD-2010-3841 No score

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterprise Web Platform (aka JBEWP) 5.1.0; allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data.

Record
EUVD-2010-3841
Updated
2026-11-03
GitHub AdvisoriesGHSA-3f3h-gc4r-7vvp No score

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run...

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterprise Web Platform (aka JBEWP) 5.1.0; allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data.

Record
GHSA-3f3h-gc4r-7vvp
Weakness
CWE-20
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glassfish-jaxb
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:2.1.4-1.17.patch04.ep1.el4
0:2.1.4-1.17.patch04.ep1.el4
glassfish-jaxws
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:2.1.1-1jpp.ep1.13.el4
0:2.1.1-1jpp.ep1.13.el4
hibernate3
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el4
1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el4
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:3.3.1-2.0.GA_CP04.ep1.el4
0:3.3.1-2.0.GA_CP04.ep1.el4
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:3.3.1-2.0.GA_CP04.ep1.el4
0:3.3.1-2.0.GA_CP04.ep1.el4
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el4
1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el4
javassist
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:3.9.0-2.ep1.1.el4
0:3.9.0-2.ep1.1.el4
jboss-common
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:1.2.2-1.ep1.1.el4
0:1.2.2-1.ep1.1.el4
jboss-messaging
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:1.4.0-4.SP3_CP11.1.ep1.el4
0:1.4.0-4.SP3_CP11.1.ep1.el4
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:2.2.3-4.SP3.ep1.el4
0:2.2.3-4.SP3.ep1.el4
Show 52 moreShow less
Affected packages
PackageAffectedFixed
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el4
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el4
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el4
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el4
jboss-seam2
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:2.0.2.FP-1.ep1.26.el4
0:2.0.2.FP-1.ep1.26.el4
jboss-seam2-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:2.0.2.FP-1.ep1.26.el4
0:2.0.2.FP-1.ep1.26.el4
jbossas
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:4.3.0-8.GA_CP09.2.ep1.el4
0:4.3.0-8.GA_CP09.2.ep1.el4
jbossas-4.3.0.GA_CP09-bin
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:4.3.0-8.GA_CP09.2.ep1.el4
0:4.3.0-8.GA_CP09.2.ep1.el4
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:4.3.0-8.GA_CP09.2.ep1.el4
0:4.3.0-8.GA_CP09.2.ep1.el4
jbossts
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 1:4.2.3-2.SP5_CP10.1jpp.ep1.1.el4
1:4.2.3-2.SP5_CP10.1jpp.ep1.1.el4
jbossweb
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:2.0.0-7.CP15.0jpp.ep1.1.el4
0:2.0.0-7.CP15.0jpp.ep1.1.el4
jbossws
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:2.0.1-6.SP2_CP09.2.ep1.el4
0:2.0.1-6.SP2_CP09.2.ep1.el4
jbossws-common
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:1.0.0-3.GA_CP06.1.ep1.el4
0:1.0.0-3.GA_CP06.1.ep1.el4
jgroups
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 1:2.4.9-1.ep1.el4
1:2.4.9-1.ep1.el4
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:4.3.0-8.GA_CP09.ep1.3.el4
0:4.3.0-8.GA_CP09.ep1.3.el4
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:4.3.0-8.GA_CP09.ep1.3.el4
0:4.3.0-8.GA_CP09.ep1.3.el4
xalan-j2
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 3 CVEs
 before 0:2.7.1-4.ep1.1.el4
0:2.7.1-4.ep1.1.el4
glassfish-jaxb
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:2.1.4-1.17.patch04.ep1.el5
0:2.1.4-1.17.patch04.ep1.el5
glassfish-jaxws
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:2.1.1-1jpp.ep1.13.el5
0:2.1.1-1jpp.ep1.13.el5
hibernate3
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el5
1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el5
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:3.3.1-2.0.GA_CP04.ep1.el5
0:3.3.1-2.0.GA_CP04.ep1.el5
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:3.3.1-2.0.GA_CP04.ep1.el5
0:3.3.1-2.0.GA_CP04.ep1.el5
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el5
1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el5
javassist
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:3.9.0-2.ep1.1.el5
0:3.9.0-2.ep1.1.el5
jboss-common
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:1.2.2-1.ep1.1.el5
0:1.2.2-1.ep1.1.el5
jboss-messaging
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:1.4.0-4.SP3_CP11.1.ep1.el5
0:1.4.0-4.SP3_CP11.1.ep1.el5
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:2.2.3-4.SP3.ep1.el5
0:2.2.3-4.SP3.ep1.el5
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el5.1
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el5.1
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el5.1
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el5.1
jboss-seam2
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:2.0.2.FP-1.ep1.26.el5
0:2.0.2.FP-1.ep1.26.el5
jboss-seam2-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:2.0.2.FP-1.ep1.26.el5
0:2.0.2.FP-1.ep1.26.el5
jbossas
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:4.3.0-8.GA_CP09.2.1.ep1.el5
0:4.3.0-8.GA_CP09.2.1.ep1.el5
jbossas-4.3.0.GA_CP09-bin
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:4.3.0-8.GA_CP09.2.1.ep1.el5
0:4.3.0-8.GA_CP09.2.1.ep1.el5
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:4.3.0-8.GA_CP09.2.1.ep1.el5
0:4.3.0-8.GA_CP09.2.1.ep1.el5
jbossts
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 1:4.2.3-2.SP5_CP10.1jpp.ep1.1.el5
1:4.2.3-2.SP5_CP10.1jpp.ep1.1.el5
jbossweb
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:2.0.0-7.CP15.0jpp.ep1.1.el5
0:2.0.0-7.CP15.0jpp.ep1.1.el5
jbossws
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:2.0.1-6.SP2_CP09.2.ep1.el5
0:2.0.1-6.SP2_CP09.2.ep1.el5
jbossws-common
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:1.0.0-3.GA_CP06.1.ep1.el5
0:1.0.0-3.GA_CP06.1.ep1.el5
jgroups
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 1:2.4.9-1.ep1.el5
1:2.4.9-1.ep1.el5
quartz
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:1.5.2-1jpp.patch01.ep1.4.2.el5
0:1.5.2-1jpp.patch01.ep1.4.2.el5
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:4.3.0-8.GA_CP09.ep1.3.el5
0:4.3.0-8.GA_CP09.ep1.3.el5
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:4.3.0-8.GA_CP09.ep1.3.el5
0:4.3.0-8.GA_CP09.ep1.3.el5
xalan-j2
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 3 CVEs
 before 0:2.7.1-4.ep1.1.el5
0:2.7.1-4.ep1.1.el5
jboss-remoting
Red Hat:jboss_enterprise_application_platform:5::el4
 before 0:2.5.3-5.SP1.1.ep5.el4
0:2.5.3-5.SP1.1.ep5.el4
jbossas-security-policy-cc
Red Hat:jboss_enterprise_application_platform:5::el4
 before 0:5.1.0-1.ep5.el4
0:5.1.0-1.ep5.el4
jbossws-cxf
Red Hat:jboss_enterprise_application_platform:5::el4
 before 0:3.1.2-4.SP7.6.jdk6.ep5.el4
0:3.1.2-4.SP7.6.jdk6.ep5.el4
jopr-embedded
Red Hat:jboss_enterprise_application_platform:5::el4
 before 0:1.3.4-16.SP1.7.ep5.el4
0:1.3.4-16.SP1.7.ep5.el4
jboss-remoting
Red Hat:jboss_enterprise_application_platform:5::el5
 before 0:2.5.3-5.SP1.1.ep5.el5
0:2.5.3-5.SP1.1.ep5.el5
jbossas-security-policy-cc
Red Hat:jboss_enterprise_application_platform:5::el5
 before 0:5.1.0-1.ep5.el5
0:5.1.0-1.ep5.el5
jbossws-cxf
Red Hat:jboss_enterprise_application_platform:5::el5
 before 0:3.1.2-4.SP7.6.jdk6.ep5.el5
0:3.1.2-4.SP7.6.jdk6.ep5.el5
jopr-embedded
Red Hat:jboss_enterprise_application_platform:5::el5
 before 0:1.3.4-16.SP1.7.ep5.el5
0:1.3.4-16.SP1.7.ep5.el5
jboss-remoting
Red Hat:jboss_enterprise_web_platform:5::el5
 before 0:2.5.3-5.SP1.1.ep5.el5
0:2.5.3-5.SP1.1.ep5.el5
jbossws-cxf
Red Hat:jboss_enterprise_web_platform:5::el5
 before 0:3.1.2-4.SP7.6.jdk6.ep5.el5
0:3.1.2-4.SP7.6.jdk6.ep5.el5
jopr-embedded
Red Hat:jboss_enterprise_web_platform:5::el5
 before 0:1.3.4-16.SP1.7.ep5.el5
0:1.3.4-16.SP1.7.ep5.el5

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-3862 is a low vulnerability (CVSS 2.6) in Redhat Jboss Enterprise Application Platform, published December 30, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.61%, the 85th percentile. Fixed in jboss-remoting 0:2.5.3-5.SP1.1.ep5.el4.

References

Show 37 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open