448 matches found
openslp 2.0.0 Double Free
Reference: https://dumpco.re/blog/openslp-2.0.0-double-free 2018-06-28 SLPD DOUBLE FREE ================ An issue was found in openslp-2.0.0 that can be used to induce a double free bug or memory corruption by corrupting glibc's doubly-linked memory chunk list. On line 409 of slpdprocess.c, the...
Security Bulletin: Vulnerability in OpenSLP affects PowerKVM (CVE-2015-5177)
Summary PowerKVM is affected by a vulnerability in OpenSLP. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-5177 DESCRIPTION: OpenSLP is vulnerable to a denial of service, caused by a double free error in the SLPDProcessMessage function. A remote attacker could exploit this...
OpenSLP Heap Memory Corruption - US
Lenovo Security Advisory: LEN-18247 Potential Impact: Denial of service, other undefined behavior Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2017-17833 Summary Description: OpenSLP versions used in several Lenovo products are vulnerable to heap memory corruption, potentiall...
CVE-2017-17833
A use-after-free flaw in OpenSLP 1.x and 2.x baselines was discovered in the ProcessSrvRqst function. A failure to update a local pointer may lead to heap corruption. A remote attacker may be able to leverage this flaw to gain remote code execution...
Debian: Security Advisory (DLA-1364-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1364-1 : openslp-dfsg security update
CVE-2017-17833 An issue has been found in openslp that is related to heap memory corruption, which may result in a denial of service or remote code execution. For Debian 7 'Wheezy', these problems have been fixed in version 1.2.1-9+deb7u2. We recommend that you upgrade your openslp-dfsg packages...
[SECURITY] [DLA 1364-1] openslp-dfsg security update
Package : openslp-dfsg Version : 1.2.1-9+deb7u2 CVE ID : CVE-2017-17833 CVE-2017-17833 An issue has been found in openslp that is related to heap memory corruption, which may result in a denial-of-service or remote code execution. For Debian 7 "Wheezy", these problems have been fixed in version...
DLA-1364-1 openslp-dfsg - security update
Bulletin has no description...
Remote code execution
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability...
CVE-2017-17833
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability...
CVE-2017-17833
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability...
CVE-2017-17833
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability...
CVE-2017-17833
OpenSLP CVE-2017-17833 is a heap-related memory corruption vulnerability in OpenSLP 1.0.2 and 1.1.0 (slpd/slpd_process.c) that may cause denial of service or remote code execution. Public details appear in multiple advisories: Debian fixes to openslp-dfsg 1.2.1-10+deb8u2; Red Hat/CentOS advisorie...
CVE-2017-17833: Improper Restriction of Operations within the Bounds of a Memory Buffer
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability...
CVE-2017-17833
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability...
UBUNTU-CVE-2017-17833
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability...
PT-2018-1895
Name of the Vulnerable Software and Affected Versions openslp-dfsg versions 1.0.2 through 1.1.0 Description The issue is related to memory handling errors. It may allow a remote attacker to execute arbitrary code or cause a denial-of-service. Recommendations For versions 1.0.2 through 1.1.0, at t...
SUSE SLED12 / SLES12 Security Update : openslp (SUSE-SU-2018:0100-1)
This update for openslp fixes two security issues and two bugs. The following vulnerabilities were fixed : - CVE-2016-4912: A remote attacker could have crashed the server with a large number of packages bsc980722 - CVE-2016-7567: A remote attacker could cause a memory corruption having unspecifi...
SUSE-SU-2018:0100-1 Security update for openslp
This update for openslp fixes two security issues and two bugs. The following vulnerabilities were fixed: - CVE-2016-4912: A remote attacker could have crashed the server with a large number of packages bsc980722 - CVE-2016-7567: A remote attacker could cause a memory corruption having unspecifie...