CVE-2010-2285
published 2010-06-15CVE-2010-2285: The SMB PIPE dissector in Wireshark 0.8.20 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer…
PriorityP49low3.3CVSS 2.0
AVAACLAuNCNINAP
EPSS
1.13%
63.1th percentile
The SMB PIPE dissector in Wireshark 0.8.20 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer dereference) via unknown vectors.
Affected
40 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | wireshark | < wireshark 1.2.9-1 (bookworm) | wireshark 1.2.9-1 (bookworm) |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | — | — |
CVSS provenance
nvdv2.03.3LOWAV:A/AC:L/Au:N/C:N/I:N/A:P
osv3.3LOW
vendor_debian3.3LOW
vendor_redhat3.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6fxr-gg36-rpjr: The SMB PIPE dissector in Wireshark 0
ghsa_unreviewed·2022-05-17
CVE-2010-2285 [LOW] GHSA-6fxr-gg36-rpjr: The SMB PIPE dissector in Wireshark 0
The SMB PIPE dissector in Wireshark 0.8.20 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer dereference) via unknown vectors.
OSV
CVE-2010-2285: The SMB PIPE dissector in Wireshark 0
osv·2010-06-15·CVSS 3.3
CVE-2010-2285 [LOW] CVE-2010-2285: The SMB PIPE dissector in Wireshark 0
The SMB PIPE dissector in Wireshark 0.8.20 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer dereference) via unknown vectors.
Red Hat
wireshark: SMB PIPE dissector NULL pointer dereference
vendor_redhat·2010-06-09·CVSS 3.3
CVE-2010-2285 [LOW] CWE-476 wireshark: SMB PIPE dissector NULL pointer dereference
wireshark: SMB PIPE dissector NULL pointer dereference
The SMB PIPE dissector in Wireshark 0.8.20 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer dereference) via unknown vectors.
Statement: Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 3, 4, or 5.
Package: wireshark (Red Hat Enterprise Linux 4) - Not affected
Package: wireshark (Red Hat Enterprise Linux 5) - Not affected
Package: wireshark (Red Hat Enterprise Linux 6) - Not affected
Debian
CVE-2010-2285: wireshark - The SMB PIPE dissector in Wireshark 0.8.20 through 1.0.13 and 1.2.0 through 1.2....
vendor_debian·2010·CVSS 3.3
CVE-2010-2285 [LOW] CVE-2010-2285: wireshark - The SMB PIPE dissector in Wireshark 0.8.20 through 1.0.13 and 1.2.0 through 1.2....
The SMB PIPE dissector in Wireshark 0.8.20 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (NULL pointer dereference) via unknown vectors.
Scope: local
bookworm: resolved (fixed in 1.2.9-1)
bullseye: resolved (fixed in 1.2.9-1)
forky: resolved (fixed in 1.2.9-1)
sid: resolved (fixed in 1.2.9-1)
trixie: resolved (fixed in 1.2.9-1)
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlhttp://secunia.com/advisories/40112http://secunia.com/advisories/42877http://secunia.com/advisories/43068http://www.mandriva.com/security/advisories?name=MDVSA-2010:113http://www.openwall.com/lists/oss-security/2010/06/11/1http://www.securityfocus.com/bid/40728http://www.vupen.com/english/advisories/2010/1418http://www.vupen.com/english/advisories/2011/0076http://www.vupen.com/english/advisories/2011/0212http://www.wireshark.org/security/wnpa-sec-2010-05.htmlhttp://www.wireshark.org/security/wnpa-sec-2010-06.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11488http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlhttp://secunia.com/advisories/40112http://secunia.com/advisories/42877http://secunia.com/advisories/43068http://www.mandriva.com/security/advisories?name=MDVSA-2010:113http://www.openwall.com/lists/oss-security/2010/06/11/1http://www.securityfocus.com/bid/40728http://www.vupen.com/english/advisories/2010/1418http://www.vupen.com/english/advisories/2011/0076http://www.vupen.com/english/advisories/2011/0212http://www.wireshark.org/security/wnpa-sec-2010-05.htmlhttp://www.wireshark.org/security/wnpa-sec-2010-06.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11488
2010-06-15
Published