VMSA-2019-0022:VMware ESXi and Horizon DaaS updates address OpenSLP remote code execution vulnerability

VMware Security Advisories Advisory ID| VMSA-2019-0022.1 ---|--- Advisory Severity| Critical CVSSv3 Range| 9.8 Synopsis| VMware ESXi and Horizon DaaS updates address OpenSLP remote code execution vulnerability CVE-2019-5544 Issue Date| 2019-12-05 Updated On| 2020-05-08 CVEs| CVE-2019-5544 1...

CVE-2012-4428

openslp: SLPIntersectStringList' Function has a DoS vulnerability...

Security feature bypass

openslp: SLPIntersectStringList' Function has a DoS vulnerability...

CVE-2012-4428

CVE-2012-4428 concerns OpenSLP: the DoS vulnerability is caused by an out-of-bounds read in the function SLPIntersectStringList(), which can be exploited remotely to disrupt service. Public advisories across multiple distributions confirm OpenSLP-related fixes and upgrade requirements (e.g., Debi...

CVE-2012-4428

openslp: SLPIntersectStringList' Function has a DoS vulnerability...

EulerOS 2.0 SP5 : openslp (EulerOS-SA-2019-2176)

According to the version of the openslp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a...

NewStart CGSL MAIN 4.05 : openslp Vulnerability (NS-SA-2019-0128)

The remote NewStart CGSL host, running version MAIN 4.05, has openslp packages installed that are affected by a vulnerability: - A use-after-free flaw in OpenSLP 1.x and 2.x baselines was discovered in the ProcessSrvRqst function. A failure to update a local pointer may lead to heap corruption. A...

NewStart CGSL CORE 5.04 / MAIN 5.04 : openslp Vulnerability (NS-SA-2019-0022)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openslp packages installed that are affected by a vulnerability: - A use-after-free flaw in OpenSLP 1.x and 2.x baselines was discovered in the ProcessSrvRqst function. A failure to update a local pointer may lead to heap...

Security Bulletin: A vulnerability in OpenSLP affects the IBM FlashSystem models V840 and V9000

Summary A vulnerability exists in OpenSLP to which the IBM FlashSystem™ V840 and FlashSystem V9000 are susceptible. An exploit of this vulnerability CVE-2017-17833 could make the system susceptible to a denial of service due to a corruption of heap memory by a remote attacker. Vulnerability Detai...

SUSE-SU-2018:2991-3 Security update for openslp

This update for openslp fixes the following issues: - CVE-2017-17833: Prevent heap-related memory corruption issue which may have manifested itself as a denial-of-service or a remote code-execution vulnerability bsc1090638 - Prevent out of bounds reads in message parsing...

openSUSE Security Update : openslp (openSUSE-2019-514)

This update for openslp fixes the following issues : - CVE-2017-17833: Prevent heap-related memory corruption issue which may have manifested itself as a denial-of-service or a remote code-execution vulnerability bsc1090638 - Prevent out of bounds reads in message parsing This update was imported...

Security Bulletin: IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru is affected by vulnerability in OpenSLP (CVE-2017-17833)

Summary The following vulnerability in OpenSLP has been addressed by IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru firmware. Vulnerability Details Summary The following vulnerability in OpenSLP has been addressed by IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru firmware...

Security Bulletin: IBM NeXtScale Fan Power Controller (FPC) is affected by OpenSLP vulnerability (CVE-2017-17833)

Summary IBM NeXtScale Fan Power Controller FPC has addressed the following vulnerability in OpenSLP. Vulnerability Details Summary IBM NeXtScale Fan Power Controller FPC has addressed the following vulnerability in OpenSLP. Vulnerability Details CVEID: CVE-2017-17833 Description: OpenSLP, as used...

Security Bulletin: IBM Chassis Management Module (CMM) is affected by OpenSLP vulnerability (CVE-2017-17833)

Summary IBM Chassis Management Module CMM has addressed the following vulnerability in OpenSLP. Vulnerability Details Summary IBM Chassis Management Module CMM has addressed the following vulnerability in OpenSLP. Vulnerability Details CVEID: CVE-2017-17833 Description: OpenSLP, as used in multip...

Remote Code Execution (RCE)

openslp is vulnerable to remote code execution RCE attacks. The vulnerability exists as OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability...

OpenSLP Heap Memory Corruption - Lenovo Support US

No description provided...

Fedora 28 : openslp (2018-05acd3c734)

Fix heap memory corruption, CVE-2017-17833 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

SUSE SLED15 / SLES15 Security Update : openslp (SUSE-SU-2018:1917-1)

This update for openslp fixes the following issues : - CVE-2017-17833: Prevent heap-related memory corruption issue which may have manifested itself as a denial-of-service or a remote code-execution vulnerability bsc1090638 - Prevent out of bounds reads in message parsing Note that Tenable Networ...

The vulnerability of the openslp-dfsg package, related to memory-related errors, allows a perpetrator to cause a service failure, gain access to confidential data, or compromise its integrity.

The vulnerability of the openslp-dfsg package is related to memory-related errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

Security Bulletin: A vulnerability in OpenSLP affects PowerKVM

Summary PowerKVM is affected by a vulnerability in OpenSLP. IBM has now addressed this vulnerability. Vulnerability Details Relevant CVE Information: CVEID: CVE-2017-17833 DESCRIPTION: OpenSLP, as used in multiple products, is vulnerable to a denial of service. A remote attacker could exploit thi...