2017-10-16 12:31:07 -04:00
{
2019-03-17 23:44:18 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "secalert@redhat.com" ,
"ID" : "CVE-2010-4352" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
} ,
"vendor_name" : "n/a"
}
2017-10-16 12:31:07 -04:00
]
2019-03-17 23:44:18 +00:00
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"name" : "ADV-2011-0178" ,
"refsource" : "VUPEN" ,
"url" : "http://www.vupen.com/english/advisories/2011/0178"
} ,
{
"name" : "[oss-security] 20101216 CVE Request -- D-BUS -- Stack frame overflow by validating message with excessive number of nested variants" ,
"refsource" : "MLIST" ,
"url" : "http://openwall.com/lists/oss-security/2010/12/16/3"
} ,
{
"name" : "openSUSE-SU-2012:1418" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html"
} ,
{
"name" : "FEDORA-2010-19166" ,
"refsource" : "FEDORA" ,
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052550.html"
} ,
{
"name" : "http://cgit.freedesktop.org/dbus/dbus/commit/?id=7d65a3a6ed8815e34a99c680ac3869fde49dbbd4" ,
"refsource" : "CONFIRM" ,
"url" : "http://cgit.freedesktop.org/dbus/dbus/commit/?id=7d65a3a6ed8815e34a99c680ac3869fde49dbbd4"
} ,
{
"name" : "http://www.remlab.net/op/dbus-variant-recursion.shtml" ,
"refsource" : "MISC" ,
"url" : "http://www.remlab.net/op/dbus-variant-recursion.shtml"
} ,
{
"name" : "42911" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/42911"
} ,
{
"name" : "[oss-security] 20101221 Re: Re: CVE Request -- D-BUS -- Stack frame overflow by validating message with excessive number of nested variants" ,
"refsource" : "MLIST" ,
"url" : "http://openwall.com/lists/oss-security/2010/12/21/3"
} ,
{
"name" : "42580" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/42580"
} ,
{
"name" : "42960" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/42960"
} ,
{
"name" : "DSA-2149" ,
"refsource" : "DEBIAN" ,
"url" : "http://www.debian.org/security/2011/dsa-2149"
} ,
{
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=663673" ,
"refsource" : "CONFIRM" ,
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=663673"
} ,
{
"name" : "45377" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/45377"
} ,
{
"name" : "SUSE-SR:2011:004" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html"
} ,
{
"name" : "USN-1044-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-1044-1"
} ,
{
"name" : "https://bugs.freedesktop.org/show_bug.cgi?id=32321" ,
"refsource" : "CONFIRM" ,
"url" : "https://bugs.freedesktop.org/show_bug.cgi?id=32321"
} ,
{
"name" : "ADV-2011-0464" ,
"refsource" : "VUPEN" ,
"url" : "http://www.vupen.com/english/advisories/2011/0464"
} ,
{
"name" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705" ,
"refsource" : "CONFIRM" ,
"url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705"
} ,
{
"name" : "ADV-2011-0161" ,
"refsource" : "VUPEN" ,
"url" : "http://www.vupen.com/english/advisories/2011/0161"
} ,
{
"name" : "ADV-2010-3325" ,
"refsource" : "VUPEN" ,
"url" : "http://www.vupen.com/english/advisories/2010/3325"
} ,
{
"name" : "42760" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/42760"
} ,
{
"name" : "[oss-security] 20101216 Re: CVE Request -- D-BUS -- Stack frame overflow by validating message with excessive number of nested variants" ,
"refsource" : "MLIST" ,
"url" : "http://openwall.com/lists/oss-security/2010/12/16/6"
}
]
}
}