openSUSE Security Update : openslp (openSUSE-SU-2010:0992-1)

the openslp daemon could run into an endless loop when receiving specially crafted packets CVE-2010-3609. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openslp-3310. The text description of...

USN-1118-1: OpenSLP vulnerability

It was discovered that OpenSLP incorrectly handled certain corrupted messages. A remote attacker could send a specially crafted packet to the OpenSLP server and cause it to hang, leading to a denial of service...

OpenSLP denial of service vulnerability

Overview OpenSLP contains a vulnerability in the handling of packets containing malformed extensions, which can result in a denial-of-service condition. Description Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover...

CVE-2010-3609

The extension parser in slpv2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon SLPD in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service infinite loop via a packet with a "next...

Design/Logic Flaw

The extension parser in slpv2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon SLPD in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service infinite loop via a packet with a "next...

CVE-2010-3609

The extension parser in slpv2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon SLPD in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service infinite loop via a packet with a "next...

CVE-2010-3609

OpenSLP vulnerability CVE-2010-3609 affects OpenSLP 1.2.1 and earlier (before SVN r1647) used in SLPD (e.g., VMware ESX/ESXi products). A remote attacker can cause a denial of service (infinite loop) by sending a crafted packet with a next extension offset that references this or a previous exten...

CVE-2010-3609

The extension parser in slpv2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon SLPD in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service infinite loop via a packet with a "next...

OpenSLP / VMWare ESX/ESXi SLPD DoS

CPU exhaustion vulnerability...

SuSE 11.1 Security Update : openSLP (SAT Patch Number 3312)

The openslp daemon could run into an endless loop when receiving specially crafted packets CVE-2010-3609. This has been fixed. Additionally the following non-security bugs were fixed : - 564504: Fix handling of DA answers if both active and passive DA detection is off - 597215: Add configuration...

SuSE 11 Security Update : openslp (SAT Patch Number 3317)

The openslp daemon could run into an endless loop when receiving specially crafted packets. CVE-2010-3609 Additionally the following non-security bugs were fixed : - 564504: Fix handling of DA answers if both active and passive DA detection is off - 597215: Add configuration options to openSLP:...

SuSE 10 Security Update : openslp (ZYPP Patch Number 7187)

The openslp daemon could run into an endless loop when receiving specially crafted packets CVE-2010-3609. This has been fixed. Additionally the following non-security bugs were fixed : - This openSLP update extends the net.slp.isDABackup mechanism introduced with the previous update by a new...

SLES10: Security update for OpenSLP

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openslp openslp-devel openslp-server More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES10: Security update for OpenSLP

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openslp openslp-devel openslp-server More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES9: Security update for OpenSLP

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openslp openslp-devel openslp-server More details may also be found by searching for keyword 5042840 within the SuSE Enterprise Server 9 patch database linke...

SLES9: Security update for OpenSLP

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openslp-server openslp openslp-devel More details may also be found by searching for keyword 5016999 within the SuSE Enterprise Server 9 patch database linke...

SLES9: Security update for OpenSLP

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openslp-server openslp openslp-devel More details may also be found by searching for keyword 5016999 within the SuSE Enterprise Server 9 patch database at...

SLES9: Security update for OpenSLP

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openslp openslp-devel openslp-server More details may also be found by searching for keyword 5042840 within the SuSE Enterprise Server 9 patch database at...

SuSE 10 Security Update : OpenSLP (ZYPP Patch Number 5980)

OpenSLP prior this update does not correctly check the return values of OpenSSL functions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41569;...

SuSE9 Security Update : OpenSLP (YOU Patch Number 12348)

OpenSLP prior this update did not correctly check the return values of OpenSSL functions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41276;...