PT-2010-4079 · Umip · Umip

Sebastian Krahmer · Publicado 2010-07-13 · Atualizado 2024-06-15 · CVE-2010-2523

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UMIP version 0.4

Description The issue concerns multiple buffer overflows in the ha.c file of the mipv6 daemon. These overflows can be triggered by remote attackers sending crafted packets, specifically (1) ND OPT PREFIX INFORMATION or (2) ND OPT HOME AGENT INFO packets. The impact of these overflows is not explicitly specified.

Recommendations For UMIP version 0.4, consider disabling the mipv6 daemon until a patch is available to prevent potential exploitation of the buffer overflows in the ha.c file. Restrict access to the network to minimize the risk of receiving crafted packets.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-2523

OPENSUSE-SU-2024:10465-1

Produtos afetados

Umip

Referências · 11

• http://marc.info/?l=oss-security&m=127850299910685&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2523 · Nota de Segurança
• http://securityfocus.com/bid/41522 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2010/07/07/4 · Nota
• http://openwall.com/lists/oss-security/2010/07/09/1 · Nota
• http://openwall.com/lists/oss-security/2010/07/06/5 · Correção
• https://osv.dev/vulnerability/openSUSE-SU-2024:10465-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2010-2523 · Nota
• https://suse.com/security/cve/CVE-2010-2522 · Nota
• http://marc.info/?l=oss-security&m=127859390815405&w=2 · Nota