PT-2011-1422 · Openslp+2 · Openslp+2

Nicolas Gregoire · Published 2011-03-11 · Updated 2024-06-15 · CVE-2010-3609

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions OpenSLP versions prior to SVN revision 1647 VMware ESX versions 4.0 and 4.1 VMware ESXi versions 4.0 and 4.1

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This can be achieved by sending a packet with a "next extension offset" that references the current extension or a previous one.

Recommendations For OpenSLP versions prior to SVN revision 1647, update to a version after SVN revision 1647 to resolve the issue. For VMware ESX versions 4.0 and 4.1, consider updating to a newer version that incorporates the fix for OpenSLP. For VMware ESXi versions 4.0 and 4.1, consider updating to a newer version that incorporates the fix for OpenSLP.

Exploit

Fix

Related Identifiers

ALT-PU-2018-2713

CVE-2010-3609

DLA-304-1

OPENSUSE-SU-2024:10065-1

Affected Products

Alt Linux

Openslp

Vmware Esxi

References · 32

• 🔥 https://exploit-db.com/exploits/17610 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5177 · Security Note
• https://bdu.fstec.ru/vul/2015-09474 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4428 · Security Note
• http://vupen.com/english/advisories/2011/0606 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2012:141 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0729 · Vendor Advisory
• http://secunia.com/advisories/43742 · Vendor Advisory
• http://vmware.com/security/advisories/VMSA-2011-0004.html · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2018-2713 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2013:111 · Vendor Advisory
• http://secunia.com/advisories/43601 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0769 · Security Note
• https://security.gentoo.org/glsa/201707-05 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10065-1 · Vendor Advisory