CVE-2010-2891
HIGH · CVSS 7.5EPSS 14.0%EU EUVD
Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an Object Identifier (aka OID) represented as a numerical string containing many components separated by . (dot) characters.
Key facts
- CVSS score
- 7.5 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P- Weakness (CWE)
- CWE-119
- EPSS score
- 14.0% (97th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2010-2895)
- Published
- October 28, 2010
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2010-2895 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- tu-braunschweig / libsmi
References
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
- http://secunia.com/advisories/41841(Vendor Advisory)
- http://secunia.com/advisories/42877
- http://secunia.com/advisories/42902
- http://secunia.com/advisories/43068
- http://security-tracker.debian.org/tracker/CVE-2010-2891
- http://www.coresecurity.com/content/libsmi-smigetnode-buffer-overflow(Exploit, Patch)
- http://www.debian.org/security/2011/dsa-2145
- http://www.exploit-db.com/exploits/15293(Exploit, Patch)
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:209
- http://www.securityfocus.com/archive/1/514382/100/0/threaded
- http://www.securityfocus.com/bid/44276(Exploit, Patch)
- http://www.vupen.com/english/advisories/2010/2764(Vendor Advisory)
- http://www.vupen.com/english/advisories/2011/0076
- http://www.vupen.com/english/advisories/2011/0111
- http://www.vupen.com/english/advisories/2011/0212
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62686
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain