CVE-2010-0304
CVE-2010-0304
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request function.
EPSS 74,1% · Código de explotación público · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
wireshark Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.2.6-1
Actualiza a 1.2.6-1
wireshark Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.2.6-1
Actualiza a 1.2.6-1
wireshark Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.2.6-1
Actualiza a 1.2.6-1
Fuentes originales
- http://www.debian.org/security/2010/dsa-1983
- http://www.wireshark.org/security/wnpa-sec-2010-02.html
- http://www.openwall.com/lists/oss-security/2010/01/29/4
- http://www.metasploit.com/modules/exploit/multi/misc/wireshark_lwres_getaddrbyname
- http://secunia.com/advisories/38348
- http://secunia.com/advisories/38829
- http://www.securityfocus.com/bid/37985
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9933
- http://osvdb.org/61987
- http://secunia.com/advisories/38257
- http://www.vupen.com/english/advisories/2010/0239
- http://anonsvn.wireshark.org/viewvc/trunk-1.2/epan/dissectors/packet-lwres.c?view=diff&r1=31596&r2=28492&diff_format=h
- http://www.securitytracker.com/id?1023516
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:031
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55951
- http://www.wireshark.org/security/wnpa-sec-2010-01.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8490
- http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036415.html
- https://nvd.nist.gov/vuln/detail/CVE-2010-0304