Lucene search
+L

448 matches found

osv_ubuntu
osv_ubuntu
•added 2019/12/06 5:00 a.m.•14 views

UBUNTU-CVE-2019-5544

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8...

9.8CVSS7.2AI score0.98129EPSS
SaveExploits2References5
UbuntuCve
UbuntuCve
•added 2019/12/06 5:00 a.m.•39 views

CVE-2019-5544

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8...

9.8CVSS7.1AI score0.98129EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/06 12:00 a.m.•3 views

CVE-2019-5544: Out-of-bounds Write

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8...

9.8CVSS8AI score0.98129EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2019/12/06 12:00 a.m.•80 views

CVE-2019-5544 — ESXi OpenSLP remote code execution vulnerability

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...

9.8CVSS9.4AI score0.98129EPSS
SaveIn wildExploits2References11
Symantec
Symantec
•added 2019/12/06 12:00 a.m.•74 views

OpenSLP CVE-2019-5544 Heap Memory Corruption Vulnerability

Description OpenSLP is prone to a heap-memory-corruption vulnerability. An attacker can exploit this issue to crash the affected application or execute arbitrary code within the context of the affected application. OpenSLP 1.2.1 and 2.0.0 are vulnerable; other versions may also be affected...

1AI score0.98129EPSS
SaveExploits2References1Affected Software3
VMware
VMware
•added 2019/12/05 12:00 a.m.•82 views

VMware ESXi and Horizon DaaS updates address OpenSLP remote code execution vulnerability (CVE-2019-5544)

1. Impacted Products VMware ESXi VMware Horizon DaaS 2. Introduction A vulnerability in OpenSLP was privately reported to VMware. Patches and workarounds are available to address this vulnerability in affected VMware products. 3. VMware ESXi and Horizon DaaS updates address OpenSLP remote code...

7.5CVSS10AI score0.98129EPSS
SaveExploits2References12Affected Software2
Positive Technologies
Positive Technologies
•added 2019/12/05 12:00 a.m.•11 views

PT-2019-5512

Name of the Vulnerable Software and Affected Versions VMware ESXi and Horizon DaaS affected versions not specified Description The issue is related to a heap overwrite problem in OpenSLP as used in ESXi and the Horizon DaaS appliances. This can potentially allow a remote attacker to impact the...

10CVSS8.7AI score0.98129EPSS
SaveExploits2References45
VMware
VMware
•added 2019/12/03 12:00 a.m.•156 views

VMSA-2019-0022:VMware ESXi and Horizon DaaS updates address OpenSLP remote code execution vulnerability

VMware Security Advisories Advisory ID| VMSA-2019-0022.1 ---|--- Advisory Severity| Critical CVSSv3 Range| 9.8 Synopsis| VMware ESXi and Horizon DaaS updates address OpenSLP remote code execution vulnerability CVE-2019-5544 Issue Date| 2019-12-05 Updated On| 2020-05-08 CVEs| CVE-2019-5544 1...

9.8CVSS10AI score0.98129EPSS
SaveExploits2References35Affected Software2
NVD
NVD
•added 2019/12/02 6:15 p.m.•30 views

CVE-2012-4428

openslp: SLPIntersectStringList' Function has a DoS vulnerability...

7.5CVSS7.5AI score0.10112EPSS
SaveExploits0References10
Prion
Prion
•added 2019/12/02 6:15 p.m.•20 views

Security feature bypass

openslp: SLPIntersectStringList' Function has a DoS vulnerability...

5CVSS6.9AI score0.10112EPSS
SaveExploits0References10Affected Software4
Cvelist
Cvelist
•added 2019/12/02 5:41 p.m.•41 views

CVE-2012-4428

openslp: SLPIntersectStringList' Function has a DoS vulnerability...

7.5AI score0.10112EPSS
SaveExploits0References10
CVE
CVE
•added 2019/12/02 5:41 p.m.•134 views

CVE-2012-4428

CVE-2012-4428 concerns OpenSLP: the DoS vulnerability is caused by an out-of-bounds read in the function SLPIntersectStringList(), which can be exploited remotely to disrupt service. Public advisories across multiple distributions confirm OpenSLP-related fixes and upgrade requirements (e.g., Debi...

7.5CVSS7.4AI score0.10112EPSS
SaveExploits0References10Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/02 12:00 a.m.•4 views

CVE-2012-4428: Out-of-bounds Read

openslp: SLPIntersectStringList' Function has a DoS vulnerability...

7.5CVSS7.2AI score0.10112EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/11/08 12:00 a.m.•35 views

EulerOS 2.0 SP5 : openslp (EulerOS-SA-2019-2176)

According to the version of the openslp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a...

9.8CVSS6.7AI score0.12364EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
•added 2019/08/12 12:00 a.m.•32 views

NewStart CGSL MAIN 4.05 : openslp Vulnerability (NS-SA-2019-0128)

The remote NewStart CGSL host, running version MAIN 4.05, has openslp packages installed that are affected by a vulnerability: - A use-after-free flaw in OpenSLP 1.x and 2.x baselines was discovered in the ProcessSrvRqst function. A failure to update a local pointer may lead to heap corruption. A...

9.8CVSS8.2AI score0.03759EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/08/12 12:00 a.m.•27 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : openslp Vulnerability (NS-SA-2019-0022)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openslp packages installed that are affected by a vulnerability: - A use-after-free flaw in OpenSLP 1.x and 2.x baselines was discovered in the ProcessSrvRqst function. A failure to update a local pointer may lead to heap...

9.8CVSS8.2AI score0.03759EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2019/06/28 4:00 p.m.•41 views

Security Bulletin: A vulnerability in OpenSLP affects the IBM FlashSystem models V840 and V9000

Summary A vulnerability exists in OpenSLP to which the IBM FlashSystem™ V840 and FlashSystem V9000 are susceptible. An exploit of this vulnerability CVE-2017-17833 could make the system susceptible to a denial of service due to a corruption of heap memory by a remote attacker. Vulnerability Detai...

9.8CVSS0.7AI score0.03759EPSS
SaveExploits0Affected Software2
osv_suse
osv_suse
•added 2019/04/26 8:47 p.m.•9 views

SUSE-SU-2018:2991-3 Security update for openslp

This update for openslp fixes the following issues: - CVE-2017-17833: Prevent heap-related memory corruption issue which may have manifested itself as a denial-of-service or a remote code-execution vulnerability bsc1090638 - Prevent out of bounds reads in message parsing...

9.8CVSS9.6AI score0.03759EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2019/03/27 12:00 a.m.•23 views

openSUSE Security Update : openslp (openSUSE-2019-514)

This update for openslp fixes the following issues : - CVE-2017-17833: Prevent heap-related memory corruption issue which may have manifested itself as a denial-of-service or a remote code-execution vulnerability bsc1090638 - Prevent out of bounds reads in message parsing This update was imported...

9.8CVSS7.8AI score0.03759EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2019/01/31 2:40 a.m.•37 views

Security Bulletin: IBM Chassis Management Module (CMM) is affected by OpenSLP vulnerability (CVE-2017-17833)

Summary IBM Chassis Management Module CMM has addressed the following vulnerability in OpenSLP. Vulnerability Details Summary IBM Chassis Management Module CMM has addressed the following vulnerability in OpenSLP. Vulnerability Details CVEID: CVE-2017-17833 Description: OpenSLP, as used in multip...

9.8CVSS0.6AI score0.03759EPSS
SaveExploits0
Rows per page
Query Builder