What is CVE-2010-2054?

CVE-2010-2054 is a vulnerability in Standards Based Linux Instrumentation Sblim-Sfcb, classified under CWE-189. Published 2010-06-15.

Is CVE-2010-2054 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Standards Based Linux Instrumentation Sblim-Sfcb

CVE-2010-2054

Integer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB 1.3.4 through 1.3.7, when the configuration sets httpMaxContentLength to a zero value, allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via a large integer in the Content-Length HTTP header, aka bug #3001915. NOTE: some of these details are obtained from third party information.

EPSS: 0.052 (91.6th percentile) — read the EPSS interpretation.

Affected products

Standards_based_linux_instrumentation Sblim-sfcb — versions 1.3.6, 1.3.7, 1.3.5
N/a — versions n/a

Weakness classification (CWE)

CWE-189

Public proof-of-concept exploits

c-skills/CVEs

References

secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
secalert@redhat.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (mailing-list, x_refsource_MLIST)

Frequently asked questions

What is CVE-2010-2054?: CVE-2010-2054 is a vulnerability in Standards Based Linux Instrumentation Sblim-Sfcb, classified under CWE-189. Published 2010-06-15.
Is CVE-2010-2054 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.