{"id":"CVE-2013-4210","aliases":["EUVD-2013-4115","GHSA-5mp8-w9f6-gv7r","RHSA-2013:1369","RHSA-2013:1370"],"status":"published","title":"The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat...","description":"The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other products allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02672,"percentile":0.85867,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2013-10-01T17:00:00Z","modified":"2026-08-05T10:02:19Z","fixes":[{"ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el4","package":"jboss-remoting","fixed_in":["0:2.5.4-11.SP4_patch01.ep5.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el5","package":"jboss-remoting","fixed_in":["0:2.5.4-11.SP4_patch01.ep5.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el6","package":"jboss-remoting","fixed_in":["0:2.5.4-11.SP4_patch01.ep5.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el5","package":"jboss-remoting","fixed_in":["0:2.5.4-11.SP4_patch01.ep5.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el6","package":"jboss-remoting","fixed_in":["0:2.5.4-11.SP4_patch01.ep5.el6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el4","package":"jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.4-11.SP4_patch01.ep5.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el5","package":"jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.4-11.SP4_patch01.ep5.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el6","package":"jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.4-11.SP4_patch01.ep5.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el5","package":"jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.4-11.SP4_patch01.ep5.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el6","package":"jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.4-11.SP4_patch01.ep5.el6"}]}]}],"products":[{"vendor":"redhat","product":"jboss_enterprise_application_platform"},{"vendor":"redhat","product":"jboss_enterprise_brms_platform"},{"vendor":"redhat","product":"jboss_enterprise_soa_platform"},{"vendor":"redhat","product":"jboss_enterprise_web_platform"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2013-1373.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1369.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1372.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1370.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1371.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1448.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1374.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4210","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-5mp8-w9f6-gv7r"},{"url":"https://access.redhat.com/errata/RHSA-2013:1369","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=994321","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1369.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4210","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4210","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1370","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1370.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2013-4210","description":"The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other products allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors.","status":"published","published":"2013-10-01T17:00:00Z","modified":"2024-08-06T16:38:01.696Z","updated_at":"2026-11-02T14:34:57.869657Z"}],"euvd":[{"id":"EUVD-2013-4115","description":"The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other products allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors.","status":"published","published":"2013-10-01T17:00:00Z","modified":"2024-08-06T16:38:01Z","updated_at":"2026-11-03T01:56:32.70868Z"}],"ghsa":[{"id":"GHSA-5mp8-w9f6-gv7r","title":"The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat...","description":"The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other products allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors.","status":"published","published":"2022-05-17T04:58:58Z","modified":"2023-01-28T05:03:04Z","updated_at":"2026-11-02T14:43:54.031093Z"}],"nvd":[{"id":"CVE-2013-4210","description":"The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other products allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors.","status":"published","published":"2013-10-01T17:55:03.49Z","modified":"2026-06-16T23:56:49.307Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:38.715467Z"}],"osv":[{"id":"RHSA-2013:1369","title":"Red Hat Security Advisory: jboss-remoting security update","status":"published","published":"2024-09-15T21:04:36Z","modified":"2026-08-05T10:02:19Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2013:1370","title":"Red Hat Security Advisory: jboss-remoting security update","status":"published","published":"2024-09-15T21:04:41Z","modified":"2026-08-05T10:02:19Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}