Red Hat Bugzilla – Bug 604302
CVE-2010-2286 wireshark: SigComp UDVM dissector infinite loop
Last modified: 2018-08-15 17:50:05 EDT
Common Vulnerabilities and Exposures assigned an identifier CVE-2010-2286 to the following vulnerability: Name: CVE-2010-2286 URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2286 Assigned: 20100614 Reference: MLIST:[oss-security] 20100610 CVE request for new wireshark vulnerabilities Reference: URL: http://www.openwall.com/lists/oss-security/2010/06/11/1 Reference: CONFIRM: http://www.wireshark.org/security/wnpa-sec-2010-05.html Reference: CONFIRM: http://www.wireshark.org/security/wnpa-sec-2010-06.html Reference: MANDRIVA:MDVSA-2010:113 Reference: URL: http://www.mandriva.com/security/advisories?name=MDVSA-2010:113 Reference: SECUNIA:40112 Reference: URL: http://secunia.com/advisories/40112 Reference: VUPEN:ADV-2010-1418 Reference: URL: http://www.vupen.com/english/advisories/2010/1418 The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors. Upstream commits: trunk: http://anonsvn.wireshark.org/viewvc?view=rev&revision=33061 trunk: http://anonsvn.wireshark.org/viewvc?view=rev&revision=33065 trunk-1.2: http://anonsvn.wireshark.org/viewvc?view=rev&revision=33131 trunk-1.0: http://anonsvn.wireshark.org/viewvc?view=rev&revision=33147
Created wireshark tracking bugs for this issue Affects: fedora-all [bug 549580]
Upstream bug report: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4826
This issue has been addressed in following products: Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 Red Hat Enterprise Linux 5 Via RHSA-2010:0625 https://rhn.redhat.com/errata/RHSA-2010-0625.html