Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-y2k4-j1e9-x7cg
Vulnerability ID VCID-y2k4-j1e9-x7cg
Aliases CVE-2010-4301
Summary Multiple vulnerabilities in Wireshark allow for the remote execution of arbitrary code, or a Denial of Service condition.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-399 Resource Management Errors
System Score Found at
epss 0.05697 https://api.first.org/data/v1/epss?cve=CVE-2010-4301
epss 0.05697 https://api.first.org/data/v1/epss?cve=CVE-2010-4301
epss 0.05697 https://api.first.org/data/v1/epss?cve=CVE-2010-4301
epss 0.05697 https://api.first.org/data/v1/epss?cve=CVE-2010-4301
epss 0.05697 https://api.first.org/data/v1/epss?cve=CVE-2010-4301
epss 0.05697 https://api.first.org/data/v1/epss?cve=CVE-2010-4301
epss 0.05697 https://api.first.org/data/v1/epss?cve=CVE-2010-4301
cvssv2 5.0 https://nvd.nist.gov/vuln/detail/CVE-2010-4301
Reference id Reference type URL
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://osvdb.org/69355
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4301.json
https://api.first.org/data/v1/epss?cve=CVE-2010-4301
https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5315&action=edit
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5303
http://secunia.com/advisories/42290
http://secunia.com/advisories/42877
http://secunia.com/advisories/43068
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14713
http://www.exploit-db.com/exploits/15973
http://www.securityfocus.com/bid/44986
http://www.vupen.com/english/advisories/2010/3038
http://www.vupen.com/english/advisories/2011/0076
http://www.vupen.com/english/advisories/2011/0212
http://www.wireshark.org/security/wnpa-sec-2010-14.html
656437 https://bugzilla.redhat.com/show_bug.cgi?id=656437
cpe:2.3:a:wireshark:wireshark:1.4.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wireshark:wireshark:1.4.0:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:1.4.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wireshark:wireshark:1.4.1:*:*:*:*:*:*:*
CVE-2010-4301 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/15973.txt
CVE-2010-4301 https://nvd.nist.gov/vuln/detail/CVE-2010-4301
GLSA-201110-02 https://security.gentoo.org/glsa/201110-02
Data source Exploit-DB
Date added Jan. 11, 2011
Description Wireshark - ZigBee ZCL Dissector Infinite Loop Denial of Service
Ransomware campaign use Unknown
Source publication date Jan. 11, 2011
Exploit type dos
Platform multiple
Source update date Jan. 11, 2011
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2010-4301
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.90371
EPSS Score 0.05697
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:01:11.211343+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201110-02 38.0.0