Lucene search

K
mageiaGentoo FoundationMGASA-2020-0075
HistoryFeb 09, 2020 - 10:13 p.m.

Updated openslp packages fix security vulnerability

2020-02-0922:13:40
Gentoo Foundation
advisories.mageia.org
17

0.033 Low

EPSS

Percentile

91.3%

A heap-based buffer overflow was discovered in OpenSLP in the way the slpd service processes URLs in service request messages. A remote unauthenticated attacker could register a service with a specially crafted URL that, when used during a service request message, would trigger the flaw and cause the program to crash or to remotely execute code with the privileges of the slpd service (CVE-2019-5544).

OSVersionArchitecturePackageVersionFilename
Mageia7noarchopenslp< 2.0.0-10.1openslp-2.0.0-10.1.mga7