PT-2010-4467 · Wireshark · Wireshark

Publicado 2010-08-13 · Atualizado 2017-09-19 · CVE-2010-2994

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 0.10.13 through 1.0.14 Wireshark versions 1.2.0 through 1.2.9

Description A stack-based buffer overflow issue exists in the ASN.1 BER dissector of Wireshark, allowing for remote attack vectors. The impact of this issue is unknown. It is noted that this issue is a result of a regression.

Recommendations For Wireshark versions 0.10.13 through 1.0.14, update to a version outside of this range to resolve the issue. For Wireshark versions 1.2.0 through 1.2.9, update to a version outside of this range to resolve the issue. As a temporary workaround, consider disabling the ASN.1 BER dissector until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-2994

DSA-2101-1

Produtos afetados

Wireshark

Referências · 12

• http://vupen.com/english/advisories/2011/0076 · Nota
• https://osv.dev/vulnerability/CVE-2010-2994 · Aviso do Fabricante
• http://wireshark.org/docs/relnotes/wireshark-1.2.10.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0212 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html · Aviso do Fabricante
• http://secunia.com/advisories/43068 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-2994 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2010-2994 · Aviso do Fabricante
• http://secunia.com/advisories/42877 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-2994 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12047 · Nota