425 matches found
Null pointer dereference
The xrealloc function in xlspxmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a large number of crafted packets, which triggers a memory allocation failure...
CVE-2016-4912
The xrealloc function in xlspxmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a large number of crafted packets, which triggers a memory allocation failure...
CVE-2016-4912
The xrealloc function in xlspxmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a large number of crafted packets, which triggers a memory allocation failure...
CVE-2016-4912
The CVE-2016-4912 issue affects OpenSLP 2.0.0, specifically the _xrealloc function in xlsp_xmalloc.c. The root cause is a memory allocation failure triggered by a high volume of crafted packets, leading to a NULL pointer dereference and a crash (remote DoS). Several connected sources corroborate ...
Fedora Update for openslp FEDORA-2017-47a4910f07
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 25 : openslp (2017-47a4910f07)
Fix possible overflow in SLPFoldWhiteSpace, CVE-2016-7567 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
[SECURITY] Fedora 25 Update: openslp-2.0.0-10.fc25
Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...
CVE-2016-7567
Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string...
CVE-2016-7567
Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string...
AZL-36967 CVE-2016-7567 affecting package openslp for versions less than 2.0.0-26
Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string...
AZL-7320 CVE-2016-7567 affecting package openslp for versions less than 2.0.0-26
Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string...
Buffer overflow
Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string...
CVE-2016-7567
Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string...
CVE-2016-7567
CVE-2016-7567 affects OpenSLP 2.0 and is caused by a buffer overflow in the SLPFoldWhiteSpace function (common/slp_compare.c). This vulnerability allows remote attackers to impact the target via a crafted SLP message; CVSS vectors in the report indicate high impact with network access and no auth...
CVE-2016-7567
Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string...
openSUSE Security Update : openslp (openSUSE-2016-1262)
This update for openslp fixes two security issues and two bugs. The following vulnerabilities were fixed : - CVE-2016-4912: A remote attacker could have crashed the server with a large number of packages bsc980722 - CVE-2016-7567: A remote attacker could cause a memory corruption having unspecifi...
SUSE SLED12 / SLES12 Security Update : openslp (SUSE-SU-2016:2661-1)
This update for openslp fixes two security issues and two bugs. The following vulnerabilities were fixed : - CVE-2016-4912: A remote attacker could have crashed the server with a large number of packages bsc980722 - CVE-2016-7567: A remote attacker could cause a memory corruption having unspecifi...
SUSE-SU-2016:2661-1 Security update for openslp
This update for openslp fixes two security issues and two bugs. The following vulnerabilities were fixed: - CVE-2016-4912: A remote attacker could have crashed the server with a large number of packages bsc980722 - CVE-2016-7567: A remote attacker could cause a memory corruption having unspecifie...
