Vulnerability CVE-2010-3609
Published: 2011-03-11   Modified: 2012-02-13

Description:
The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SLPD) in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service (infinite loop) via a packet with a "next extension offset" that references this extension or a previous extension. NOTE: some of these details are obtained from third party information.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
VMware ESX/ESXi SLPD ESX Multiple Vulns
VMware Security ...
15.03.2011

Type:

CWE-noinfo

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Vmware -> ESX 
Vmware -> ESXI 
Openslp -> Openslp 

 References:
http://lists.vmware.com/pipermail/security-announce/2011/000126.html
http://securityreason.com/securityalert/8127
http://securitytracker.com/id?1025168
http://www.kb.cert.org/vuls/id/393783
http://www.mandriva.com/security/advisories?name=MDVSA-2012:141
http://www.mandriva.com/security/advisories?name=MDVSA-2013:111
http://www.securityfocus.com/archive/1/516909/100/0/threaded
http://www.securityfocus.com/bid/46772
http://www.vmware.com/security/advisories/VMSA-2011-0004.html
http://www.vupen.com/english/advisories/2011/0606
http://www.vupen.com/english/advisories/2011/0729
https://exchange.xforce.ibmcloud.com/vulnerabilities/65931
https://security.gentoo.org/glsa/201707-05
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0227
Copyright 2024, cxsecurity.com

 

Back to Top