[SECURITY] [DLA 304-1] openslp-dfsg security update

Package : openslp-dfsg Version : 1.2.1-7.8+deb6u1 CVE ID : CVE-2010-3609 CVE-2012-4428 CVE-2015-5177 Debian Bug : 623551 687597 795429 Several issues have been found and solved in OpenSLP, that implements the Internet Engineering Task Force IETF Service Location Protocol standards protocol...

DLA-304-1 openslp-dfsg - security update

Bulletin has no description...

CVE-2015-5177

Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpdknownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service crash via a crafted package...

Fedora Update for openslp FEDORA-2015-7561

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : openslp-1.2.1-22.fc20 (2015-7561)

openslp: denial of service vulnerability CVE-2010-3609 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 20 Update: openslp-1.2.1-22.fc20

Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...

SUSE SLED11 / SLES11 Security Update : OpenSLP (SUSE-SU-2015:0922-1)

This update for OpenSLP fixes a bug in SLPIntersectStringList that could lead to an out-of-bounds read CVE-2012-4428. Additionally, the SLP daemon now always use localtime3 when writing to log files to avoid having timestamps with different timezones. Note that Tenable Network Security has...

SUSE-SU-2015:0922-1 Security update for OpenSLP

This update for OpenSLP fixes a bug in SLPIntersectStringList that could lead to an out-of-bounds read CVE-2012-4428. Additionally, the SLP daemon now always use localtime3 when writing to log files to avoid having timestamps with different timezones. Security Issues: CVE-2012-4428...

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the openslp package up to version 1.2.1 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

OpenSLP 1.2.1 & < 1647 trunk - Denial of Service Exploit

No description provided by source. !/usr/bin/python Title: OpenSLP DoS Author: Nicolas Gregoire @AgarriFR CVE: 2010-3609 Software download: http://www.openslp.org/download.html Version: v1.2.1 and trunk before revision 1647 Tested on: Linux Ubuntu 10.04, VMware ESX 4.0 Notes: It affects some othe...

openSUSE Security Update : openslp (openSUSE-SU-2010:0992-1)

the openslp daemon could run into an endless loop when receiving specially crafted packets CVE-2010-3609. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openslp-3310. The text description of...

Mandriva Linux Security Advisory : openslp (MDVSA-2013:111)

Updated openslp packages fix security vulnerability : The extension parser in slpv2message.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service infinite loop via a packet with a next extension offset that references this extension or a previous extension CVE-2010-3609...

CVE-2012-4428

openslp: SLPIntersectStringList' Function has a DoS vulnerability...

UBUNTU-CVE-2012-4428

openslp: SLPIntersectStringList' Function has a DoS vulnerability...

Mandriva Linux Security Advisory : openslp (MDVSA-2012:141)

A vulnerability has been discovered and corrected in openslp : The extension parser in slpv2message.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service infinite loop via a packet with a next extension offset that references this extension or a previous extension CVE-2010-3609...

Mandriva Update for openslp MDVSA-2012:141 (openslp)

Check for the Version of openslp OpenVAS Vulnerability Test Mandriva Update for openslp MDVSA-2012:141 openslp Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for openslp MDVSA-2012:141 (openslp)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

OpenSLP 1.2.1 1647 trunk - Denial of Service

OpenSLP 1.2.1 1647 trunk - Denial of Service !/usr/bin/python Title: OpenSLP DoS Author: Nicolas Gregoire @AgarriFR CVE: 2010-3609 Software download: http://www.openslp.org/download.html Version: v1.2.1 and trunk before revision 1647 Tested on: Linux Ubuntu 10.04, VMware ESX 4.0 Notes: It affects...

OpenSLP Denial of Service Exploit

Exploit for multiple platform in category dos / poc !/usr/bin/python Title: OpenSLP DoS Author: Nicolas Gregoire @AgarriFR CVE: 2010-3609 Software download: http://www.openslp.org/download.html Version: v1.2.1 and trunk before revision 1647 Tested on: Linux Ubuntu 10.04, VMware ESX 4.0 Notes: It...

OpenSLP 1.2.1 / < 1647 trunk - Denial of Service

!/usr/bin/python Title: OpenSLP DoS Author: Nicolas Gregoire @AgarriFR CVE: 2010-3609 Software download: http://www.openslp.org/download.html Version: v1.2.1 and trunk before revision 1647 Tested on: Linux Ubuntu 10.04, VMware ESX 4.0 Notes: It affects some others SLP softwares, like mSLP. More...