CVE-2010-3198
Zope Denial of Service (DoS) vulnerability in ZServer
CVE-2010-3198 is a medium vulnerability (CVSS 4.3) in Zope, published September 8, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.54%, the 75th percentile. Fixed in zope 2.10.12.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 1.54%EPSS, 75th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.10.12zope +2 more
Description
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
- Record
CVE-2010-3198- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
- Record
CVE-2010-3198- Updated
- 2026-11-02
EUVDEUVD-2010-0032No score
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
- Record
EUVD-2010-0032- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qh4q-fwf8-qqrw
Zope Denial of Service (DoS) vulnerability in ZServer
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
- Record
GHSA-qh4q-fwf8-qqrw- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
OSVGHSA-qh4q-fwf8-qqrw
Zope Denial of Service (DoS) vulnerability in ZServer
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
- Record
GHSA-qh4q-fwf8-qqrw- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
OSVPYSEC-2010-32No score
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
- Record
PYSEC-2010-32- Updated
- 2026-11-02
OSVPYSEC-2010-33No score
Withdrawn as duplicate of PYSEC-2010-32 ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
- Record
PYSEC-2010-33- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
zope.org/Products/Zope/2.10.12/CHANGES.txt
vupen.com/english/advisories/2010/2275
mail.zope.org/pipermail/zope-announce/2010-September/002247.html
securityfocus.com/bid/42939
bugs.launchpad.net/zope2/+bug/627988
Show 8 moreShow less
nvd.nist.gov/vuln/detail/CVE-2010-3198
github.com/zopefoundation/Zope/commit/0f2f56f63e4a4d695ee670e02b317e900550dbac
web.archive.org/web/20200229173503/http://www.securityfocus.com/bid/42939