CVE-2010-2286
The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13...
The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
3.3
The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
- Record
CVE-2010-2286- CVSS 2.0
- 3.3 Low
AV:A/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
- Record
CVE-2010-2286- Updated
- 2026-11-02
EUVDEUVD-2010-2296 No score
The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
- Record
EUVD-2010-2296- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mvxw-3948-pfh6 No score
The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13...
The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
- Record
GHSA-mvxw-3948-pfh6- Updated
- 2026-11-02
OSV No score
The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
- Record
CVE-2010-2286- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-2286 No score
The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
- Record
DEBIAN-CVE-2010-2286- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 1.2.9-1 | 1.2.9-1 |
wiresharkDebian:13 |
before 1.2.9-1 | 1.2.9-1 |
wiresharkDebian:14 |
before 1.2.9-1 | 1.2.9-1 |
wiresharkDebian:5.0 From an advisory covering 5 CVEs |
before 1.0.2-3+lenny9, plus listed versions 1.0.2-3+lenny31.0.2-3+lenny41.0.2-3+lenny51.0.2-3+lenny61.0.2-3+lenny71.0.2-3+lenny8 |
1.0.2-3+lenny9 |
wiresharkRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.15-EL3.1 | 0:1.0.15-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.15-EL3.1 | 0:1.0.15-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.15-EL3.1 | 0:1.0.15-EL3.1 |
wiresharkRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.15-EL3.1 | 0:1.0.15-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.15-EL3.1 | 0:1.0.15-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.15-EL3.1 | 0:1.0.15-EL3.1 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.15-EL3.1 | 0:1.0.15-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.15-EL3.1 | 0:1.0.15-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.15-EL3.1 | 0:1.0.15-EL3.1 |
wiresharkRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.15-EL3.1 | 0:1.0.15-EL3.1 |
wireshark-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.15-EL3.1 | 0:1.0.15-EL3.1 |
wireshark-gnomeRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.15-EL3.1 | 0:1.0.15-EL3.1 |
wiresharkRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:1.0.15-1.el4_8.1 | 0:1.0.15-1.el4_8.1 |
wireshark-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:1.0.15-1.el4_8.1 | 0:1.0.15-1.el4_8.1 |
wireshark-gnomeRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:1.0.15-1.el4_8.1 | 0:1.0.15-1.el4_8.1 |
wiresharkRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:1.0.15-1.el4_8.1 | 0:1.0.15-1.el4_8.1 |
wireshark-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:1.0.15-1.el4_8.1 | 0:1.0.15-1.el4_8.1 |
wireshark-gnomeRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:1.0.15-1.el4_8.1 | 0:1.0.15-1.el4_8.1 |
wiresharkRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:1.0.15-1.el4_8.1 | 0:1.0.15-1.el4_8.1 |
wireshark-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:1.0.15-1.el4_8.1 | 0:1.0.15-1.el4_8.1 |
wireshark-gnomeRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:1.0.15-1.el4_8.1 | 0:1.0.15-1.el4_8.1 |
wiresharkRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:1.0.15-1.el4_8.1 | 0:1.0.15-1.el4_8.1 |
wireshark-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:1.0.15-1.el4_8.1 | 0:1.0.15-1.el4_8.1 |
wireshark-gnomeRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:1.0.15-1.el4_8.1 | 0:1.0.15-1.el4_8.1 |
wiresharkRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:1.0.15-1.el5_5.1 | 0:1.0.15-1.el5_5.1 |
wireshark-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:1.0.15-1.el5_5.1 | 0:1.0.15-1.el5_5.1 |
wireshark-gnomeRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:1.0.15-1.el5_5.1 | 0:1.0.15-1.el5_5.1 |
wiresharkRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:1.0.15-1.el5_5.1 | 0:1.0.15-1.el5_5.1 |
wireshark-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:1.0.15-1.el5_5.1 | 0:1.0.15-1.el5_5.1 |
wiresharkRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:1.0.15-1.el5_5.1 | 0:1.0.15-1.el5_5.1 |
wireshark-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:1.0.15-1.el5_5.1 | 0:1.0.15-1.el5_5.1 |
wireshark-gnomeRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:1.0.15-1.el5_5.1 | 0:1.0.15-1.el5_5.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2286 is a low vulnerability (CVSS 3.3) in Wireshark, published June 15, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.12%, the 66th percentile. Fixed in wireshark 1.2.9-1.
References
lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html
wireshark.org/security/wnpa-sec-2010-05.html
secunia.com/advisories/43068
vupen.com/english/advisories/2011/0212
wireshark.org/security/wnpa-sec-2010-06.html
openwall.com/lists/oss-security/2010/06/11/1
Show 38 moreShow less
secunia.com/advisories/42877
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
vupen.com/english/advisories/2011/0076
secunia.com/advisories/40112
securityfocus.com/bid/40728
vupen.com/english/advisories/2010/1418
mandriva.com/security/advisories?name=MDVSA-2010:113
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11792
nvd.nist.gov/vuln/detail/CVE-2010-2286
github.com/advisories/GHSA-mvxw-3948-pfh6
security-tracker.debian.org/tracker/CVE-2010-2286
access.redhat.com/errata/RHSA-2010:0625
access.redhat.com/security/updates/classification
wireshark.org/security/wnpa-sec-2010-03.html
wireshark.org/security/wnpa-sec-2010-07.html
bugzilla.redhat.com/show_bug.cgi?id=590613
bugzilla.redhat.com/show_bug.cgi?id=604290
bugzilla.redhat.com/show_bug.cgi?id=604292
bugzilla.redhat.com/show_bug.cgi?id=604302
bugzilla.redhat.com/show_bug.cgi?id=604308
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0625.json
access.redhat.com/security/cve/CVE-2010-1455
cve.org/CVERecord?id=CVE-2010-1455
nvd.nist.gov/vuln/detail/CVE-2010-1455
access.redhat.com/security/cve/CVE-2010-2283
cve.org/CVERecord?id=CVE-2010-2283
nvd.nist.gov/vuln/detail/CVE-2010-2283
access.redhat.com/security/cve/CVE-2010-2284
cve.org/CVERecord?id=CVE-2010-2284
nvd.nist.gov/vuln/detail/CVE-2010-2284
access.redhat.com/security/cve/CVE-2010-2286
cve.org/CVERecord?id=CVE-2010-2286
access.redhat.com/security/cve/CVE-2010-2287
cve.org/CVERecord?id=CVE-2010-2287
nvd.nist.gov/vuln/detail/CVE-2010-2287
access.redhat.com/security/cve/CVE-2010-2995
cve.org/CVERecord?id=CVE-2010-2995
nvd.nist.gov/vuln/detail/CVE-2010-2995