PT-2010-4823 · Wireshark+1 · Wireshark+1

Vincent Danen · Publicado 2010-11-26 · Atualizado 2024-06-15 · CVE-2010-3445

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.2.x through 1.2.11 Wireshark versions 1.4.x through 1.4.0

Description The issue is caused by an infinite recursion error in the dissect unknown ber() function, allowing remote attackers to cause a denial of service via a specially crafted packet, such as an SNMP packet with a long string in an unknown ASN.1/BER encoded packet. This can lead to a stack overflow and crash.

Recommendations For Wireshark versions 1.2.x through 1.2.11, update to version 1.2.12 or later. For Wireshark versions 1.4.x through 1.4.0, update to version 1.4.1 or later.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2010-3445

DSA-2127-1

ELSA-2011-0013

OPENSUSE-SU-2024:10199-1

RHSA-2010:0924

RHSA-2010_0924

RHSA-2011:0370

RHSA-2011_0370

Produtos afetados

Red Hat

Wireshark

Referências · 318

• 🔥 http://xorl.wordpress.com/2010/10/15/cve-2010-3445-wireshark-asn-1-ber-stack-overflow · Exploit
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/wireshark/cldap.rb · Nota
• https://suse.com/security/cve/CVE-2015-6243 · Nota
• https://suse.com/security/cve/CVE-2014-6428 · Nota
• https://suse.com/security/cve/CVE-2013-3558 · Nota
• https://suse.com/security/cve/CVE-2013-1576 · Nota
• https://suse.com/security/cve/CVE-2011-1140 · Nota
• https://suse.com/security/cve/CVE-2012-4298 · Nota
• https://suse.com/security/cve/CVE-2013-4932 · Nota
• https://suse.com/security/cve/CVE-2011-3266 · Nota
• https://suse.com/security/cve/CVE-2011-1143 · Nota
• https://suse.com/security/cve/CVE-2014-2282 · Nota
• https://suse.com/security/cve/CVE-2014-8710 · Nota
• https://suse.com/security/cve/CVE-2012-4289 · Nota
• https://suse.com/security/cve/CVE-2016-6511 · Nota