How severe is CVE-2010-3071?

CVE-2010-3071 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2010-3071 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (86th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2010-3071?

CVE-2010-3071 primarily affects Duckcorp Bip. In total, 14 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2010-3071?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2010-3071 published?

CVE-2010-3071 was published on 2010-10-14 and last updated on 2026-06-16.

CVE-2010-3071

CVE-2010-3071 is a medium-severity vulnerability in Duckcorp Bip with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 5.0)
EPSS exploit prediction: 3% (86th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Duckcorp Bip
Published: 2010-10-14
Last modified: 2026-06-16

Description

bip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an empty USER command.

Frequently asked questions

What is CVE-2010-3071?: bip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an empty USER command.
How severe is CVE-2010-3071?: CVE-2010-3071 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2010-3071 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (86th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2010-3071?: CVE-2010-3071 primarily affects Duckcorp Bip. In total, 14 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2010-3071?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2010-3071 published?: CVE-2010-3071 was published on 2010-10-14 and last updated on 2026-06-16.

References

Affected products (14)

cpe:2.3:a:duckcorp:bip:*:*:*:*:*:*:*:*
cpe:2.3:a:duckcorp:bip:0.7.0:*:*:*:*:*:*:*
cpe:2.3:a:duckcorp:bip:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:duckcorp:bip:0.7.2:*:*:*:*:*:*:*
cpe:2.3:a:duckcorp:bip:0.7.3:*:*:*:*:*:*:*
cpe:2.3:a:duckcorp:bip:0.7.4:*:*:*:*:*:*:*
cpe:2.3:a:duckcorp:bip:0.7.5:*:*:*:*:*:*:*
cpe:2.3:a:duckcorp:bip:0.8.0:*:*:*:*:*:*:*
cpe:2.3:a:duckcorp:bip:0.8.0:rc0:*:*:*:*:*:*
cpe:2.3:a:duckcorp:bip:0.8.0:rc1:*:*:*:*:*:*
cpe:2.3:a:duckcorp:bip:0.8.1:*:*:*:*:*:*:*
cpe:2.3:a:duckcorp:bip:0.8.2:*:*:*:*:*:*:*
cpe:2.3:a:duckcorp:bip:0.8.3:*:*:*:*:*:*:*
cpe:2.3:a:duckcorp:bip:0.8.4:*:*:*:*:*:*:*

More vulnerabilities in Duckcorp Bip

CVE-2012-0806 — Medium (CVSS 6.5): Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via vectors…
CVE-2013-4550 — Medium (CVSS 5.1): Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that was…
CVE-2011-5268 — Medium (CVSS 4.3): connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of…

All CVEs affecting Duckcorp Bip →