PT-2010-4467 · Wireshark · Wireshark

Published 2010-08-13 · Updated 2017-09-19 · CVE-2010-2994

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 0.10.13 through 1.0.14 Wireshark versions 1.2.0 through 1.2.9

Description A stack-based buffer overflow issue exists in the ASN.1 BER dissector of Wireshark, allowing for remote attack vectors. The impact of this issue is unknown. It is noted that this issue is a result of a regression.

Recommendations For Wireshark versions 0.10.13 through 1.0.14, update to a version outside of this range to resolve the issue. For Wireshark versions 1.2.0 through 1.2.9, update to a version outside of this range to resolve the issue. As a temporary workaround, consider disabling the ASN.1 BER dissector until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-2994

DSA-2101-1

Affected Products

Wireshark

References · 12

• https://osv.dev/vulnerability/CVE-2010-2994 · Vendor Advisory
• http://wireshark.org/docs/relnotes/wireshark-1.2.10.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-2994 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-2994 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2994 · Security Note
• http://vupen.com/english/advisories/2011/0076 · Note
• http://vupen.com/english/advisories/2011/0212 · Note
• http://secunia.com/advisories/43068 · Note
• http://secunia.com/advisories/42877 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12047 · Note