CVE-2010-2529 — Infinite Loop in Iputils

CWE-835 — Infinite Loop7 documents6 sources
Severity
5.0MEDIUMNVD
EPSS
0.7%
top 27.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
GNU InetutilsIputilsDebian Inetutils+2 more
Timeline
PublishedJul 28
Latest updateMay 17

Description

Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service (hang) via a crafted echo response.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages5 packages

▶debiandebian/iputils< inetutils 2:1.9-2 (bookworm)
▶Debianiputils/iputils< 3:20100418-2+3
▶NVDskbuff/iputils4 versions+3
▶debiandebian/inetutils< inetutils 2:1.9-2 (bookworm)
▶Debiangnu/inetutils< 2:1.9-2+3

🔴Vulnerability Details

2
GHSA
GHSA-6gwx-h964-c7xw: Unspecified vulnerability in ping↗2022-05-17
▶
OSV
CVE-2010-2529: Unspecified vulnerability in ping↗2010-07-28
▶

📋Vendor Advisories

2
Red Hat
iputils: denial of service vulnerability in ping↗2010-07-23
▶
Debian
CVE-2010-2529: inetutils - Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and...↗2010
▶

💬Community

2
Bugzilla
CVE-2010-2529 iputils: denial of service vulnerability in ping [fedora-all]↗2010-07-23
▶
Bugzilla
CVE-2010-2529 iputils: denial of service vulnerability in ping↗2010-07-12
▶