NVD

Id
14827  
Name
CVE-2010-3445  
Description
Stack consumption vulnerability in the dissect_ber_unknown function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.4.x before 1.4.1 and 1.2.x before 1.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a long string in an unknown ASN.1/BER encoded packet, as demonstrated using SNMP.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-11-26  
Modified Date
2012-08-13  
Seq
2010-3445  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
82116 14827 CVE-2010-3445 20100913 Wireshark 1.4.0 Malformed SNMP V1 Packet Denial of Service  View
82117 14827 CVE-2010-3445 http://blogs.sun.com/security/entry/resource_management_errors_vulnerability_in  View
82118 14827 CVE-2010-3445 FEDORA-2011-2648  View
82119 14827 CVE-2010-3445 FEDORA-2011-2632  View
82120 14827 CVE-2010-3445 FEDORA-2011-2620  View
82121 14827 CVE-2010-3445 SUSE-SR:2011:001  View
82122 14827 CVE-2010-3445 SUSE-SR:2011:002  View
82123 14827 CVE-2010-3445 oval:org.mitre.oval:def:14607  View
82124 14827 CVE-2010-3445 DSA-2127  View
82125 14827 CVE-2010-3445 VU#215900  View
82126 14827 CVE-2010-3445 MDVSA-2010:200  View
82127 14827 CVE-2010-3445 [oss-security] 20101001 Re: CVE requests: Poppler, Quassel, Pyfribidi, Overkill, DocUtils, FireGPG, Wireshark  View
82128 14827 CVE-2010-3445 [oss-security] 20101011 Re: CVE requests: Poppler, Quassel, Pyfribidi, Overkill, DocUtils, FireGPG, Wireshark  View
82129 14827 CVE-2010-3445 RHSA-2010:0924  View
82130 14827 CVE-2010-3445 RHSA-2011:0370  View
82131 14827 CVE-2010-3445 43197  View
82132 14827 CVE-2010-3445 ADV-2010-3067  View
82133 14827 CVE-2010-3445 ADV-2010-3093  View
82134 14827 CVE-2010-3445 ADV-2011-0076  View
82135 14827 CVE-2010-3445 ADV-2011-0212  View
82136 14827 CVE-2010-3445 ADV-2011-0404  View
82137 14827 CVE-2010-3445 ADV-2011-0626  View
82138 14827 CVE-2010-3445 ADV-2011-0719  View
82139 14827 CVE-2010-3445 http://www.wireshark.org/security/wnpa-sec-2010-12.html  View
82140 14827 CVE-2010-3445 http://xorl.wordpress.com/2010/10/15/cve-2010-3445-wireshark-asn-1-ber-stack-overflow/  View
82141 14827 CVE-2010-3445 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5230  View
82142 14827 CVE-2010-3445 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-3445  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36756 JVNDB-2010-002536 Wireshark の BER 解析部の dissect_ber_unknown 関数におけるサービス運用妨害 (DoS) の脆弱性 Wireshark の BER 解析部の epan/dissectors/packet-ber.c 内にある dissect_ber_unknown 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-3445 46025 CVE-2010-3445 14827 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002536.html 2010-10-11 2011-04-04 View