CVE-2010-3609

The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SLPD) in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service (infinite loop) via a packet with a "next extension offset" that references this extension or a previous extension. NOTE: some of these details are obtained from third party information.

• http://lists.vmware.com/pipermail/security-announce/2011/000126.html
• http://secunia.com/advisories/43601Vendor Advisory
• http://secunia.com/advisories/43742Vendor Advisory
• http://securityreason.com/securityalert/8127
• http://securitytracker.com/id?1025168
• http://www.kb.cert.org/vuls/id/393783US Government Resource
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:141
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:111
• http://www.osvdb.org/71019
• http://www.securityfocus.com/archive/1/516909/100/0/threaded
• http://www.securityfocus.com/bid/46772
• http://www.vmware.com/security/advisories/VMSA-2011-0004.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2011/0606Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0729Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65931
• https://security.gentoo.org/glsa/201707-05
• https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0227
• http://lists.vmware.com/pipermail/security-announce/2011/000126.html
• http://secunia.com/advisories/43601Vendor Advisory
• http://secunia.com/advisories/43742Vendor Advisory
• http://securityreason.com/securityalert/8127
• http://securitytracker.com/id?1025168
• http://www.kb.cert.org/vuls/id/393783US Government Resource
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:141
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:111
• http://www.osvdb.org/71019
• http://www.securityfocus.com/archive/1/516909/100/0/threaded
• http://www.securityfocus.com/bid/46772
• http://www.vmware.com/security/advisories/VMSA-2011-0004.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2011/0606Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0729Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65931
• https://security.gentoo.org/glsa/201707-05
• https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0227

Published

Mar 11, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3603Cross-site request forgery (CSRF) vulnerability in the file …
• CVE-2010-3604SQL injection vulnerability in the powermail extension 1.5.3…
• CVE-2010-3605Cross-site scripting (XSS) vulnerability in the powermail ex…
• CVE-2010-3606Multiple directory traversal vulnerabilities in AGENTS/index…
• CVE-2010-3607Cross-site scripting (XSS) vulnerability in AGENTS/index.php…
• CVE-2010-3608Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow r…
• CVE-2010-3611ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 …
• CVE-2010-3613named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-…
• CVE-2010-3614named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3…
• CVE-2010-3615named in ISC BIND 9.7.2-P2 does not check all intended locat…
• CVE-2010-3616ISC DHCP server 4.2 before 4.2.0-P2, when configured to use …
• CVE-2010-3618PGP Desktop 10.0.x before 10.0.3 SP2 and 10.1.0 before 10.1.…