PT-2011-1422 · Openslp+2 · Openslp+2

Nicolas Gregoire · Publicado 2011-03-11 · Atualizado 2024-06-15 · CVE-2010-3609

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions OpenSLP versions prior to SVN revision 1647 VMware ESX versions 4.0 and 4.1 VMware ESXi versions 4.0 and 4.1

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This can be achieved by sending a packet with a "next extension offset" that references the current extension or a previous one.

Recommendations For OpenSLP versions prior to SVN revision 1647, update to a version after SVN revision 1647 to resolve the issue. For VMware ESX versions 4.0 and 4.1, consider updating to a newer version that incorporates the fix for OpenSLP. For VMware ESXi versions 4.0 and 4.1, consider updating to a newer version that incorporates the fix for OpenSLP.

Exploit

Correção

Identificadores relacionados

ALT-PU-2018-2713

CVE-2010-3609

DLA-304-1

OPENSUSE-SU-2024:10065-1

Produtos afetados

Alt Linux

Openslp

Vmware Esxi

Referências · 32

• 🔥 https://exploit-db.com/exploits/17610 · Exploit
• http://securityfocus.com/bid/46772 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5177 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-09474 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-4912 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4428 · Nota de Segurança
• http://securitytracker.com/id?1025168 · Nota
• http://vupen.com/english/advisories/2011/0606 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDVSA-2012:141 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3609 · Nota
• http://vupen.com/english/advisories/2011/0729 · Aviso do Fabricante
• https://packages.altlinux.org/ru/vuln/CVE-2010-3609 · Nota
• http://lists.vmware.com/pipermail/security-announce/2011/000126.html · Nota
• http://secunia.com/advisories/43742 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65931 · Nota