Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2010-3609

EPSS 35.47% · P97
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2010-3609

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SLPD) in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service (infinite loop) via a packet with a "next extension offset" that references this extension or a previous extension. NOTE: some of these details are obtained from third party information.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
VMware多个产品SLPD OpenSLP拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 在VMware ESX 4.0和4.1版本，及ESXi 4.0和4.1版本的Service Location Protocol守护进程（SLPD）中使用的OpenSLP 1.2.1及其他版本的slp_v2message.c中的扩展解析器中存在拒绝服务漏洞。远程攻击者可借助带有“next extension offset”的包（引用了该扩展或以前的扩展）导致拒绝服务（无限循环）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2010-3609

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2010-3609

Please Login to view more intelligence information

Same Patch Batch · n/a · 2011-03-11 · 42 CVEs total

CVE-2011-0159Apple iOS Safari Settings功能用户追踪漏洞
CVE-2011-1286Google Chrome V8无效内存访问漏洞
CVE-2011-1413Google Chrome拒绝服务漏洞
CVE-2011-0456OTRS webscript.pl命令注入漏洞
CVE-2011-1137ProFTPD mod_sftp模块整数溢出漏洞
CVE-2011-1416Research In Motion BlackBerry Torch内存内容读取漏洞
CVE-2011-1417Apple iOS MobileSafari OfficeArtBlip解析整数溢出漏洞
CVE-2011-1290WebKit 数字错误漏洞
CVE-2010-4651GNU patch util.c目录遍历漏洞
CVE-2011-0157Apple iOS WebKit任意代码执行漏洞
CVE-2011-0158Apple iOS MobileSafari拒绝服务漏洞
CVE-2011-1285Google Chrome正则表达式功能缓冲区错误漏洞
CVE-2011-0160Apple Safari和iOS WebKit信息泄露漏洞
CVE-2011-0161Apple Safari和iOS WebKit同源策略绕过和CSS令牌序列注入漏洞
CVE-2011-0162Apple iOS和TV Wi-Fi拒绝服务漏洞
CVE-2011-0163Apple Safari和iOS WebKit拒绝服务漏洞
CVE-2011-0166Apple Safari WebKit HTML5拖放功能同源策略绕过和敏感信息泄露漏洞
CVE-2011-0167Apple Safari WebKit windows功能同源策略绕过和任意本地文件上传漏洞
CVE-2011-0169Apple Safari WebKit同源策略绕过和跨站脚本攻击漏洞
CVE-2011-0715Apache HTTP服务器'mod_dav_svn'模块空指针引用漏洞

Showing top 20 of 42 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2010-3609

No comments yet

Leave a comment