VMware vCenter and ESXi updates address critical security issues.

a. VMware ESXi OpenSLP Remote Code Execution VMware ESXi contains a double free flaw in OpenSLP's SLPDProcessMessage function. Exploitation of this issue may allow an unauthenticated attacker to remotely execute code on the ESXi host. VMware would like to thank Qinghao Tang of QIHU 360 for...

VMSA-2015-0007:VMware vCenter and ESXi updates address CRITICAL security issues.

VMSA-2015-0007.7 VMware vCenter and ESXi updates address critical security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2015-0007.7 VMware Security AdvisorySynopsis: VMware vCenter and ESXi updates address critical security issues. VMware Security AdvisoryIssue date:...

FreeBSD : openslp -- denial of service vulnerability (3c259621-5d4a-11e5-9ad8-14dae9d210b8)

Qinghao Tang reports : The function ParseExtension in openslp 1.2.1 contains vulnerability: an attacker can cause a denial of service infinite loop via a packet with crafted 'nextoffset' value and 'extid' value. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openslp -- denial of service vulnerability

Qinghao Tang reports: The function ParseExtension in openslp 1.2.1 contains vulnerability: an attacker can cause a denial of service infinite loop via a packet with crafted "nextoffset" value and "extid" value...

OpenSLP double free() vulnerability

No description provided...

[SECURITY] [DSA 3353-1] openslp-dfsg security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3353-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini September 05, 2015 https://www.debian.org/security/faq -...

Debian DSA-3353-1 : openslp-dfsg - security update

Qinghao Tang of QIHU 360 discovered a double free flaw in OpenSLP, an implementation of the IETF Service Location Protocol. This could allow remote attackers to cause a denial of service crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

[SECURITY] [DSA 3353-1] openslp-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3353-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini September 05, 2015 https://www.debian.org/security/faq -...

DSA-3353-1 openslp-dfsg - security update

Bulletin has no description...

Debian Security Advisory DSA 3353-1 (openslp-dfsg - security update)

Qinghao Tang of QIHU 360 discovered a double free flaw in OpenSLP, an implementation of the IETF Service Location Protocol. This could allow remote attackers to cause a denial of service crash. OpenVAS Vulnerability Test $Id: deb3353.nasl 7739 2017-11-13 05:04:18Z teissa $ Auto-generated from...

Debian: Security Advisory (DSA-3353-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2730-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-304-1 : openslp-dfsg security update

Several issues have been found and solved in OpenSLP, that implements the Internet Engineering Task Force IETF Service Location Protocol standards protocol. CVE-2010-3609 Remote attackers could cause a Denial of Service in the Service Location Protocol daemon SLPD via a crafted packet with a 'nex...

Ubuntu 14.04 LTS : OpenSLP vulnerabilities (USN-2730-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2730-1 advisory. Georgi Geshev discovered that OpenSLP incorrectly handled processing certain service requests. A remote attacker could possibly use this issue to cause...

USN-2730-1 openslp-dfsg vulnerabilities

Georgi Geshev discovered that OpenSLP incorrectly handled processing certain service requests. A remote attacker could possibly use this issue to cause OpenSLP to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. CVE-2012-4428 Qinghao Tang...

USN-2730-1: OpenSLP vulnerabilities

Georgi Geshev discovered that OpenSLP incorrectly handled processing certain service requests. A remote attacker could possibly use this issue to cause OpenSLP to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. CVE-2012-4428 Qinghao Tang...

[SECURITY] [DLA 304-1] openslp-dfsg security update

Package : openslp-dfsg Version : 1.2.1-7.8+deb6u1 CVE ID : CVE-2010-3609 CVE-2012-4428 CVE-2015-5177 Debian Bug : 623551 687597 795429 Several issues have been found and solved in OpenSLP, that implements the Internet Engineering Task Force IETF Service Location Protocol standards protocol...

DLA-304-1 openslp-dfsg - security update

Bulletin has no description...

CVE-2015-5177

Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpdknownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service crash via a crafted package...

Fedora Update for openslp FEDORA-2015-7561

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...