CVE Feed

    Dashboard / CVE / CVE-2010-3609

    CVE-2010-3609

    The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SLPD) in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service (infinite loop) via a packet with a "next extension offset" that references this extension or a previous extension. NOTE: some of these details are obtained from third party information.

    Published:Mar 11, 2011
    Last Modified:Apr 11, 2025
    EPS:Mar 11, 2011
    EPSS Score:0.34593
    CVSS Score:5

    Affected Products

    Vendor
    Openslp
    Product
    Openslp
    Vendor
    Vmware
    Product
    Esx
    Vendor
    Vmware
    Product
    Esxi

    Exploits

    https://www.exploit-db.com/exploits/17610

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2019-5544 (CVSS 9.8) — OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the s…
    CVE-2017-17833 (CVSS 9.8) — OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may man…
    CVE-2016-7567 (CVSS 9.8) — Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attacke…
    CVE-2016-4912 (CVSS 7.5) — The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service…
    CVE-2015-5177 (CVSS 7.5) — Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote…
    CVE-2012-4428 (CVSS 7.5) — openslp: SLPIntersectStringList()' Function has a DoS vulnerability…
    CVE-2005-0769 (CVSS 7.5) — Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malform…
    CVE-2003-0875 (CVSS 2.1) — Symbolic link vulnerability in the slpd script slpd.all_init for OpenSLP before 1.0.11 allows local users to o…

    References

    http://lists.vmware.com/pipermail/security-announce/2011/000126.html
    http://secunia.com/advisories/43601
    http://secunia.com/advisories/43742
    http://securityreason.com/securityalert/8127
    http://securitytracker.com/id?1025168
    http://www.kb.cert.org/vuls/id/393783
    http://www.mandriva.com/security/advisories?name=MDVSA-2012:141
    http://www.mandriva.com/security/advisories?name=MDVSA-2013:111
    http://www.osvdb.org/71019
    http://www.securityfocus.com/archive/1/516909/100/0/threaded
    http://www.securityfocus.com/bid/46772
    http://www.vmware.com/security/advisories/VMSA-2011-0004.html
    http://www.vupen.com/english/advisories/2011/0606
    http://www.vupen.com/english/advisories/2011/0729
    https://exchange.xforce.ibmcloud.com/vulnerabilities/65931
    https://security.gentoo.org/glsa/201707-05
    https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0227
    http://lists.vmware.com/pipermail/security-announce/2011/000126.html
    http://secunia.com/advisories/43601
    http://secunia.com/advisories/43742
    http://securityreason.com/securityalert/8127
    http://securitytracker.com/id?1025168
    http://www.kb.cert.org/vuls/id/393783
    http://www.mandriva.com/security/advisories?name=MDVSA-2012:141
    http://www.mandriva.com/security/advisories?name=MDVSA-2013:111
    http://www.osvdb.org/71019
    http://www.securityfocus.com/archive/1/516909/100/0/threaded
    http://www.securityfocus.com/bid/46772
    http://www.vmware.com/security/advisories/VMSA-2011-0004.html
    http://www.vupen.com/english/advisories/2011/0606
    http://www.vupen.com/english/advisories/2011/0729
    https://exchange.xforce.ibmcloud.com/vulnerabilities/65931
    https://security.gentoo.org/glsa/201707-05
    https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0227

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High