CVE-2017-17833

OpenSLP CVE-2017-17833 is a heap-related memory corruption vulnerability in OpenSLP 1.0.2 and 1.1.0 (slpd/slpd_process.c) that may cause denial of service or remote code execution. Public details appear in multiple advisories: Debian fixes to openslp-dfsg 1.2.1-10+deb8u2; Red Hat/CentOS advisorie...

UBUNTU-CVE-2017-17833

OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability...

CVE-2017-17833

OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability...

SUSE SLED12 / SLES12 Security Update : openslp (SUSE-SU-2018:0100-1)

This update for openslp fixes two security issues and two bugs. The following vulnerabilities were fixed : - CVE-2016-4912: A remote attacker could have crashed the server with a large number of packages bsc980722 - CVE-2016-7567: A remote attacker could cause a memory corruption having unspecifi...

SUSE-SU-2018:0100-1 Security update for openslp

This update for openslp fixes two security issues and two bugs. The following vulnerabilities were fixed: - CVE-2016-4912: A remote attacker could have crashed the server with a large number of packages bsc980722 - CVE-2016-7567: A remote attacker could cause a memory corruption having unspecifie...

CVE-2015-5177

Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpdknownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service crash via a crafted package...

Double free

Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpdknownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service crash via a crafted package...

CVE-2015-5177

CVE-2015-5177 describes a double-free vulnerability in OpenSLP 1.2.1 where the SLPDProcessMessage() routine can be triggered by a crafted package, leading to remote denial of service (crash). Multiple sources corroborate a remote-exploitation vector via OpenSLP, with affected products including O...

Fedora 26 : openslp (2017-ffc47d48ec)

Fix possible overflow in SLPFoldWhiteSpace, CVE-2016-7567 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

GLSA-201707-05 : OpenSLP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201707-05 OpenSLP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenSLP. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly cause a Denial of...

OpenSLP: Multiple vulnerabilities

Background OpenSLP is an open-source implementation of Service Location Protocol SLP. Description Multiple vulnerabilities have been discovered in OpenSLP. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly cause a Denial of Service condition o...

[SECURITY] Fedora 26 Update: openslp-2.0.0-12.fc26

Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...

AZL-36966 CVE-2016-4912 affecting package openslp 2.0.0-26

The xrealloc function in xlspxmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a large number of crafted packets, which triggers a memory allocation failure...

CVE-2016-4912

The xrealloc function in xlspxmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a large number of crafted packets, which triggers a memory allocation failure...

CVE-2016-4912

The xrealloc function in xlspxmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a large number of crafted packets, which triggers a memory allocation failure...

AZL-7319 CVE-2016-4912 affecting package openslp 2.0.0-26

The xrealloc function in xlspxmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a large number of crafted packets, which triggers a memory allocation failure...

CVE-2016-4912

The xrealloc function in xlspxmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a large number of crafted packets, which triggers a memory allocation failure...

Null pointer dereference

The xrealloc function in xlspxmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a large number of crafted packets, which triggers a memory allocation failure...

CVE-2016-4912

The xrealloc function in xlspxmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a large number of crafted packets, which triggers a memory allocation failure...

CVE-2016-4912

The CVE-2016-4912 issue affects OpenSLP 2.0.0, specifically the _xrealloc function in xlsp_xmalloc.c. The root cause is a memory allocation failure triggered by a high volume of crafted packets, leading to a NULL pointer dereference and a crash (remote DoS). Several connected sources corroborate ...