CVE-2010-0304
Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 73.7%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request function.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 73.67% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- wireshark/wireshark
- Source
- secalert@redhat.com
References
- http://anonsvn.wireshark.org/viewvc/trunk-1.2/epan/dissectors/packet-lwres.c?view=diff&r1=31596&r2=28492&diff_format=h
- http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036415.html
- http://osvdb.org/61987
- http://secunia.com/advisories/38257Vendor Advisory
- http://secunia.com/advisories/38348Vendor Advisory
- http://secunia.com/advisories/38829
- http://www.debian.org/security/2010/dsa-1983
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:031
- http://www.metasploit.com/modules/exploit/multi/misc/wireshark_lwres_getaddrbyname
- http://www.openwall.com/lists/oss-security/2010/01/29/4
- http://www.securityfocus.com/bid/37985Exploit
- http://www.securitytracker.com/id?1023516
- http://www.vupen.com/english/advisories/2010/0239Patch, Vendor Advisory
- http://www.wireshark.org/security/wnpa-sec-2010-01.html
- http://www.wireshark.org/security/wnpa-sec-2010-02.htmlVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55951
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8490
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9933
- http://anonsvn.wireshark.org/viewvc/trunk-1.2/epan/dissectors/packet-lwres.c?view=diff&r1=31596&r2=28492&diff_format=h
- http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036415.html
- http://osvdb.org/61987
- http://secunia.com/advisories/38257Vendor Advisory
- http://secunia.com/advisories/38348Vendor Advisory
- http://secunia.com/advisories/38829
- http://www.debian.org/security/2010/dsa-1983
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:031
- http://www.metasploit.com/modules/exploit/multi/misc/wireshark_lwres_getaddrbyname
- http://www.openwall.com/lists/oss-security/2010/01/29/4
- http://www.securityfocus.com/bid/37985Exploit
- http://www.securitytracker.com/id?1023516
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.