CVE-2010-0304
NoneCVSS
—
EPSS
74.1%
Published
Feb 3, 2010
CISA due date
—
The record
Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request function.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | wireshark | 0 | 1.2.6-1 |
| Debian:12 | wireshark | 0 | 1.2.6-1 |
| Debian:13 | wireshark | 0 | 1.2.6-1 |
| Debian:5.0 | wireshark | 0 | 1.0.2-3+lenny8 |
| Red Hat:enterprise_linux:3::as | wireshark | 0 | 0:1.0.11-EL3.6 |
| Red Hat:enterprise_linux:3::as | wireshark-debuginfo | 0 | 0:1.0.11-EL3.6 |
| Red Hat:enterprise_linux:3::as | wireshark-gnome | 0 | 0:1.0.11-EL3.6 |
| Red Hat:enterprise_linux:3::desktop | wireshark | 0 | 0:1.0.11-EL3.6 |
| Red Hat:enterprise_linux:3::desktop | wireshark-debuginfo | 0 | 0:1.0.11-EL3.6 |
| Red Hat:enterprise_linux:3::desktop | wireshark-gnome | 0 | 0:1.0.11-EL3.6 |
| Red Hat:enterprise_linux:3::es | wireshark | 0 | 0:1.0.11-EL3.6 |
| Red Hat:enterprise_linux:3::es | wireshark-debuginfo | 0 | 0:1.0.11-EL3.6 |
| Red Hat:enterprise_linux:3::es | wireshark-gnome | 0 | 0:1.0.11-EL3.6 |
| Red Hat:enterprise_linux:3::ws | wireshark | 0 | 0:1.0.11-EL3.6 |
| Red Hat:enterprise_linux:3::ws | wireshark-debuginfo | 0 | 0:1.0.11-EL3.6 |
| Red Hat:enterprise_linux:3::ws | wireshark-gnome | 0 | 0:1.0.11-EL3.6 |
| Red Hat:enterprise_linux:4::as | wireshark | 0 | 0:1.0.11-1.el4_8.5 |
| Red Hat:enterprise_linux:4::as | wireshark-debuginfo | 0 | 0:1.0.11-1.el4_8.5 |
| Red Hat:enterprise_linux:4::as | wireshark-gnome | 0 | 0:1.0.11-1.el4_8.5 |
| Red Hat:enterprise_linux:4::desktop | wireshark | 0 | 0:1.0.11-1.el4_8.5 |
| Red Hat:enterprise_linux:4::desktop | wireshark-debuginfo | 0 | 0:1.0.11-1.el4_8.5 |
| Red Hat:enterprise_linux:4::desktop | wireshark-gnome | 0 | 0:1.0.11-1.el4_8.5 |
| Red Hat:enterprise_linux:4::es | wireshark | 0 | 0:1.0.11-1.el4_8.5 |
| Red Hat:enterprise_linux:4::es | wireshark-debuginfo | 0 | 0:1.0.11-1.el4_8.5 |
| Red Hat:enterprise_linux:4::es | wireshark-gnome | 0 | 0:1.0.11-1.el4_8.5 |
| Red Hat:enterprise_linux:4::ws | wireshark | 0 | 0:1.0.11-1.el4_8.5 |
| Red Hat:enterprise_linux:4::ws | wireshark-debuginfo | 0 | 0:1.0.11-1.el4_8.5 |
| Red Hat:enterprise_linux:4::ws | wireshark-gnome | 0 | 0:1.0.11-1.el4_8.5 |
| Red Hat:enterprise_linux:5::client | wireshark | 0 | 0:1.0.11-1.el5_5.5 |
| Red Hat:enterprise_linux:5::client | wireshark-debuginfo | 0 | 0:1.0.11-1.el5_5.5 |
| Red Hat:enterprise_linux:5::client | wireshark-gnome | 0 | 0:1.0.11-1.el5_5.5 |
| Red Hat:enterprise_linux:5::client_workstation | wireshark | 0 | 0:1.0.11-1.el5_5.5 |
| Red Hat:enterprise_linux:5::client_workstation | wireshark-debuginfo | 0 | 0:1.0.11-1.el5_5.5 |
| Red Hat:enterprise_linux:5::client_workstation | wireshark-gnome | 0 | 0:1.0.11-1.el5_5.5 |
| Red Hat:enterprise_linux:5::server | wireshark | 0 | 0:1.0.11-1.el5_5.5 |
| Red Hat:enterprise_linux:5::server | wireshark-debuginfo | 0 | 0:1.0.11-1.el5_5.5 |
| Red Hat:enterprise_linux:5::server | wireshark-gnome | 0 | 0:1.0.11-1.el5_5.5 |
Related vulnerabilities
- CVE-2024-11596 ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of… Also affects wireshark
- CVE-2024-9781 AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows… Also affects wireshark
- CVE-2024-9780 ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or… Also affects wireshark
- CVE-2024-8645 SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of… Also affects wireshark
- CVE-2024-8250 NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of… Also affects wireshark
- CVE-2024-4854 MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to… Also affects wireshark
- CVE-2024-2955 T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of… Also affects wireshark
- CVE-2023-6175 NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows… Also affects wireshark