{"id":"CVE-2010-3198","aliases":["PYSEC-2010-32","GHSA-qh4q-fwf8-qqrw","PYSEC-2010-33"],"title":"ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker thre…","summary":"ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.","severity":"none","vendor":"zope","product":"zope","ecosystem":"pip","affected":["zope >= 2.11.0, < 2.11.7"],"patched":["zope 2.11.7"],"published":"2010-09-08","updated":"2026-07-01","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/PYSEC-2010-32","references":[{"url":"https://mail.zope.org/pipermail/zope-announce/2010-September/002247.html"},{"url":"https://mail.zope.org/pipermail/zope-announce/2010-September/002247.html"},{"url":"http://www.zope.org/Products/Zope/2.10.12/CHANGES.txt"},{"url":"http://www.vupen.com/english/advisories/2010/2275"},{"url":"http://www.securityfocus.com/bid/42939"},{"url":"http://www.zope.org/Products/Zope/2.11.7/CHANGES.txt"},{"url":"https://bugs.launchpad.net/zope2/+bug/627988"},{"url":"https://bugs.launchpad.net/zope2/+bug/627988"},{"url":"https://bugs.launchpad.net/zope2/+bug/627988"}],"tags":["osv","pip"],"epss":0.01541,"epssPercentile":0.73395,"ingestedAt":"2026-07-08T18:25:55.314Z","slug":"CVE-2010-3198","body":"## Overview\n\nZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.\n\n## Affected packages\n\n- `zope >= 2.11.0, < 2.11.7`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `zope 2.11.7`","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0.3,"exploitation":0,"ransomware":0},"changes":[]}