CVE-2010-0304

Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request function.
References
Link Resource
http://anonsvn.wireshark.org/viewvc/trunk-1.2/epan/dissectors/packet-lwres.c?view=diff&r1=31596&r2=28492&diff_format=h
http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036415.html
http://osvdb.org/61987
http://secunia.com/advisories/38257 Vendor Advisory
http://secunia.com/advisories/38348 Vendor Advisory
http://secunia.com/advisories/38829
http://www.debian.org/security/2010/dsa-1983
http://www.mandriva.com/security/advisories?name=MDVSA-2010:031
http://www.metasploit.com/modules/exploit/multi/misc/wireshark_lwres_getaddrbyname
http://www.openwall.com/lists/oss-security/2010/01/29/4
http://www.securityfocus.com/bid/37985 Exploit
http://www.securitytracker.com/id?1023516
http://www.vupen.com/english/advisories/2010/0239 Patch Vendor Advisory
http://www.wireshark.org/security/wnpa-sec-2010-01.html
http://www.wireshark.org/security/wnpa-sec-2010-02.html Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/55951
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8490
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9933
http://anonsvn.wireshark.org/viewvc/trunk-1.2/epan/dissectors/packet-lwres.c?view=diff&r1=31596&r2=28492&diff_format=h
http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036415.html
http://osvdb.org/61987
http://secunia.com/advisories/38257 Vendor Advisory
http://secunia.com/advisories/38348 Vendor Advisory
http://secunia.com/advisories/38829
http://www.debian.org/security/2010/dsa-1983
http://www.mandriva.com/security/advisories?name=MDVSA-2010:031
http://www.metasploit.com/modules/exploit/multi/misc/wireshark_lwres_getaddrbyname
http://www.openwall.com/lists/oss-security/2010/01/29/4
http://www.securityfocus.com/bid/37985 Exploit
http://www.securitytracker.com/id?1023516
http://www.vupen.com/english/advisories/2010/0239 Patch Vendor Advisory
http://www.wireshark.org/security/wnpa-sec-2010-01.html
http://www.wireshark.org/security/wnpa-sec-2010-02.html Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/55951
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8490
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9933
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:wireshark:wireshark:0.9.15:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.0.8:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.0.9:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.0.10:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.2:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.2.5:*:*:*:*:*:*:*

History

21 Nov 2024, 01:11

Type Values Removed Values Added
References () http://anonsvn.wireshark.org/viewvc/trunk-1.2/epan/dissectors/packet-lwres.c?view=diff&r1=31596&r2=28492&diff_format=h - () http://anonsvn.wireshark.org/viewvc/trunk-1.2/epan/dissectors/packet-lwres.c?view=diff&r1=31596&r2=28492&diff_format=h -
References () http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036415.html - () http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036415.html -
References () http://osvdb.org/61987 - () http://osvdb.org/61987 -
References () http://secunia.com/advisories/38257 - Vendor Advisory () http://secunia.com/advisories/38257 - Vendor Advisory
References () http://secunia.com/advisories/38348 - Vendor Advisory () http://secunia.com/advisories/38348 - Vendor Advisory
References () http://secunia.com/advisories/38829 - () http://secunia.com/advisories/38829 -
References () http://www.debian.org/security/2010/dsa-1983 - () http://www.debian.org/security/2010/dsa-1983 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2010:031 - () http://www.mandriva.com/security/advisories?name=MDVSA-2010:031 -
References () http://www.metasploit.com/modules/exploit/multi/misc/wireshark_lwres_getaddrbyname - () http://www.metasploit.com/modules/exploit/multi/misc/wireshark_lwres_getaddrbyname -
References () http://www.openwall.com/lists/oss-security/2010/01/29/4 - () http://www.openwall.com/lists/oss-security/2010/01/29/4 -
References () http://www.securityfocus.com/bid/37985 - Exploit () http://www.securityfocus.com/bid/37985 - Exploit
References () http://www.securitytracker.com/id?1023516 - () http://www.securitytracker.com/id?1023516 -
References () http://www.vupen.com/english/advisories/2010/0239 - Patch, Vendor Advisory () http://www.vupen.com/english/advisories/2010/0239 - Patch, Vendor Advisory
References () http://www.wireshark.org/security/wnpa-sec-2010-01.html - () http://www.wireshark.org/security/wnpa-sec-2010-01.html -
References () http://www.wireshark.org/security/wnpa-sec-2010-02.html - Vendor Advisory () http://www.wireshark.org/security/wnpa-sec-2010-02.html - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/55951 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/55951 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8490 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8490 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9933 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9933 -

Information

Published : 2010-02-03 18:30

Updated : 2024-11-21 01:11


NVD link : CVE-2010-0304

Mitre link : CVE-2010-0304

CVE.ORG link : CVE-2010-0304


JSON object : View

Products Affected

wireshark

  • wireshark
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer