CVE-2010-3445
Published Nov 26, 2010
Last updated 7 years ago
Overview
- Description
- Stack consumption vulnerability in the dissect_ber_unknown function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.4.x before 1.4.1 and 1.2.x before 1.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a long string in an unknown ASN.1/BER encoded packet, as demonstrated using SNMP.
- Source
- secalert@redhat.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-399
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B9A59A8-7319-4F1F-AA1D-801B5F7C1974"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0059BA2-86B2-4DA5-A6C1-7248D07BB37C"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C13C7D5-D344-45D2-9FF0-2C3388C94584"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D79DA61-F97C-4DCB-A2B7-FE67C5F10964"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84D6DFA0-53A2-424C-A31C-88FD683E5674"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B441815-DF95-462C-B9F9-43E2F0B04A45"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D09E4C0-0C75-4227-87E0-F2A06E240003"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8DE4A9E3-5542-4483-9FA3-7F39C644563B"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD8A1D30-CB46-4B3D-BED5-1D045F3E1058"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.2.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "977DA99C-54EC-4DEA-AD8B-E71C5F77022F"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.2.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8ECDB7F8-F97B-440E-98DB-893C4714D47B"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.2.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27611804-AED3-443B-B1AE-25F8337FFA49"
},
{
"criteria": "cpe:2.3:a:wireshark:wireshark:1.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ABB6F1D5-64CC-474D-B123-818080ED7903"
}
],
"operator": "OR"
}
]
}
]