Updated openslp packages fix security vulnerability

🗓️ 09 Feb 2020 19:13:40Reported by Gentoo FoundationType

mageia

mageia🔗 advisories.mageia.org👁 44 Views

Updated OpenSLP packages fix heap-based buffer overflo

Reporter	Title	Published	Views	Family All 98
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSLP affects Power Hardware Management Console (CVE-2019-5544)	22 Sep 202123:38	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSLP vulnerability affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	29 Mar 202301:48	–	ibm
ATTACKERKB	CVE-2019-5544 — ESXi OpenSLP remote code execution vulnerability	6 Dec 201900:00	–	attackerkb
ATTACKERKB	CVE-2020-3992 — ESXi OpenSLP remote code execution vulnerability	20 Oct 202000:00	–	attackerkb
Tenable Nessus	Amazon Linux 2 : openslp (ALAS-2019-1378)	19 Dec 201900:00	–	nessus
Tenable Nessus	CentOS 7 : openslp (CESA-2019:4240)	27 Dec 201900:00	–	nessus
Tenable Nessus	CentOS 6 : openslp (RHSA-2020:0199)	30 Jan 202000:00	–	nessus
Tenable Nessus	Debian DLA-2025-1 : openslp-dfsg security update	9 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : openslp (EulerOS-SA-2020-1038)	2 Jan 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : openslp (EulerOS-SA-2020-1120)	24 Feb 202000:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	7	any	openslp	2.0.0-10.1	openslp-2.0.0-10.1.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2019/12/06/1

09 Feb 2020 19:13Current

3.2Low risk

Vulners AI Score3.2

CVSS 27.5

CVSS 3.19.8

EPSS0.96823

SSVC

openslp packages security vulnerability heap-based buffer overflow slpd service remote unauthenticated attacker cve-2019-5544 unix