CVE-2010-0304
60Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 74%
from disclosure to weapon0 days
Published on NVDFeb 3
1st PoCJan 29
metasploitJan 27
exploitation probability
74%top 1% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
What the vendors declare (VEX)
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Red HatVEX document ↗
Fixed
11 products (200 components)
Red Hat Desktop version 3 · Red Hat Enterprise Linux AS version 3 · Red Hat Enterprise Linux AS version 4 · Red Hat Enterprise Linux Desktop version 4 · Red Hat Enterprise Linux ES version 3 · and others 6
Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request function.
Affected products
n/a · n/apublic PoCs found — 3✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16289exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16292exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/11288⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://anonsvn.wireshark.org/viewvc/trunk-1.2/epan/dissectors/packet-lwres.c?view=diff&r1=31596&r2=28492&diff_format=hhttp://lists.fedoraproject.org/pipermail/package-announce/2010-March/036415.htmlhttp://osvdb.org/61987http://secunia.com/advisories/38257http://secunia.com/advisories/38348http://secunia.com/advisories/38829https://exchange.xforce.ibmcloud.com/vulnerabilities/55951https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8490https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9933http://www.debian.org/security/2010/dsa-1983http://www.mandriva.com/security/advisories?name=MDVSA-2010:031http://www.metasploit.com/modules/exploit/multi/misc/wireshark_lwres_getaddrbyname