NVD

Id
14987  
Name
CVE-2010-3609  
Description
The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SLPD) in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service (infinite loop) via a packet with a "next extension offset" that references this extension or a previous extension. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-07-18  
Published
2011-03-11  
Modified Date
2017-07-10  
Seq
2010-3609  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
83327 14987 CVE-2010-3609 [security-announce] 20110307 VMSA-2011-0004 VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm  View
83328 14987 CVE-2010-3609 8127  View
83329 14987 CVE-2010-3609 1025168  View
83330 14987 CVE-2010-3609 VU#393783  View
83331 14987 CVE-2010-3609 MDVSA-2012:141  View
83332 14987 CVE-2010-3609 MDVSA-2013:111  View
83333 14987 CVE-2010-3609 20110308 VMSA-2011-0004 VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm.  View
83334 14987 CVE-2010-3609 46772  View
83335 14987 CVE-2010-3609 http://www.vmware.com/security/advisories/VMSA-2011-0004.html  View
83336 14987 CVE-2010-3609 ADV-2011-0606  View
83337 14987 CVE-2010-3609 ADV-2011-0729  View
83338 14987 CVE-2010-3609 vmware-esxserver-slpd-dos(65931)  View
83339 14987 CVE-2010-3609 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0227  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31128 JVNDB-2011-001367 OpenSLP にサービス運用妨害 (DoS) の脆弱性 OpenSLP には、サービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2010-3609 46189 CVE-2010-3609 14987 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001367.html 2011-03-22 2011-04-06 View