| Package | Affected versions | Patched versions |
|---|---|---|
| zodb3 | < 3.10.0a1< 3.10.0a2 | 3.10.0a13.10.0a2 |
| zodb | = 2.10.9= 2.11.4= 2.8.11= 2.9.11= 3.1= 3.1.1= 3.2= 3.2.4= 3.3= 3.3.3= 3.4= 3.4.1= 3.5= 3.6= 3.7= 3.8= 3.8.0= 3.8.1= 3.8.2= 3.8.6= 3.9.0= 3.9.0b1= 3.9.0b2= 3.9.0b3= 3.9.0b4= 3.9.0b5= 3.9.0c1≤ 3.9.7 |
Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0a2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, a related issue to CVE-2010-3492.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free