Bug 604308 - (CVE-2010-2287, CVE-2010-2995) CVE-2010-2287 CVE-2010-2995 wireshark: SigComp UDVM dissector buffer overruns
CVE-2010-2287 CVE-2010-2995 wireshark: SigComp UDVM dissector buffer overruns
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
All Linux
medium Severity medium
: ---
: ---
Assigned To: Red Hat Product Security
: Security
Depends On: 549580 604312 612236 612237 612238 612239
  Show dependency treegraph
Reported: 2010-06-15 16:01 EDT by Vincent Danen
Modified: 2015-10-15 17:12 EDT (History)
2 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2014-04-22 16:24:53 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Vincent Danen 2010-06-15 16:01:52 EDT
Common Vulnerabilities and Exposures assigned an identifier CVE-2010-2287 to
the following vulnerability:

Name: CVE-2010-2287
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2287
Assigned: 20100614
Reference: MLIST:[oss-security] 20100610 CVE request for new wireshark vulnerabilities
Reference: URL: http://www.openwall.com/lists/oss-security/2010/06/11/1
Reference: CONFIRM: http://www.wireshark.org/security/wnpa-sec-2010-05.html
Reference: CONFIRM: http://www.wireshark.org/security/wnpa-sec-2010-06.html
Reference: MANDRIVA:MDVSA-2010:113
Reference: URL: http://www.mandriva.com/security/advisories?name=MDVSA-2010:113
Reference: SECUNIA:40112
Reference: URL: http://secunia.com/advisories/40112
Reference: VUPEN:ADV-2010-1418
Reference: URL: http://www.vupen.com/english/advisories/2010/1418

Buffer overflow in the SigComp Universal Decompressor Virtual Machine
dissector in Wireshark 0.10.8 through 1.0.13 and 1.2.0 through 1.2.8
has unknown impact and remote attack vectors.

Upstream commits:

trunk: http://anonsvn.wireshark.org/viewvc?view=rev&revision=33087
trunk: http://anonsvn.wireshark.org/viewvc?view=rev&revision=33090
trunk-1.2: http://anonsvn.wireshark.org/viewvc?view=rev&revision=33134
trunk-1.0: http://anonsvn.wireshark.org/viewvc?view=rev&revision=33149
Comment 1 Vincent Danen 2010-06-15 16:06:25 EDT
Created wireshark tracking bugs for this issue

Affects: fedora-all [bug 549580]
Comment 3 Vincent Danen 2010-06-15 16:19:41 EDT
Upstream bug report:

Comment 5 Vincent Danen 2010-08-11 15:36:39 EDT
Additional SigComp UDVM buffer overruns were discovered, so they were not all addressed in upstream 1.0.14.  These have been corrected in 1.0.15 and upstream incorrectly noted them with the same CVE name.  An additional CVE name has been assigned for these additional SigComp buffer overruns (CVE-2010-2995), corrected in:

Comment 6 errata-xmlrpc 2010-08-11 16:59:45 EDT
This issue has been addressed in following products:

  Red Hat Enterprise Linux 3
  Red Hat Enterprise Linux 4
  Red Hat Enterprise Linux 5

Via RHSA-2010:0625 https://rhn.redhat.com/errata/RHSA-2010-0625.html

Note You need to log in before you can comment on or make changes to this bug.