Lucene search
K

6 matches found

RedHat Linux
RedHat Linux
added 2020/01/22 12:37 p.m.1 views

openslp: Heap-based buffer overflow in ProcessSrvRqst() in slpd_process.c leading to remote code execution

A heap overflow vulnerability was found in OpenSLP. An attacker could use this flaw to gain remote code execution...

9.8CVSS7.7AI score0.92481EPSS
Exploits1References6
Veracode
Veracode
added 2019/12/17 12:16 a.m.49 views

Remote Code Execution (RCE)

openslp is vulnerable to remote code execution. A heap-based buffer overflow in the ProcessSrvRqst function in slpdprocess.c allows an attacker to execute arbitrary code on the system...

9.8CVSS6AI score0.92481EPSS
Exploits1References11Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/12/17 12:0 a.m.27 views

Scientific Linux Security Update : openslp on SL7.x x86_64 (20191216)

Security Fixes : - openslp: Heap-based buffer overflow in ProcessSrvRqst in slpdprocess.c leading to remote code execution CVE-2019-5544 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid132085; scriptversion"1.7";...

9.8CVSS8.8AI score0.92481EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2019/12/16 10:21 a.m.1 views

openslp: Heap-based buffer overflow in ProcessSrvRqst() in slpd_process.c leading to remote code execution

A heap overflow vulnerability was found in OpenSLP. An attacker could use this flaw to gain remote code execution...

9.8CVSS7.7AI score0.92481EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2018/07/23 2:51 p.m.1 views

openslp: Heap memory corruption in slpd/slpd_process.c allows denial of service or potentially code execution

A use-after-free flaw in OpenSLP 1.x and 2.x baselines was discovered in the ProcessSrvRqst function. A failure to update a local pointer may lead to heap corruption. A remote attacker may be able to leverage this flaw to gain remote code execution...

9.8CVSS6.1AI score0.00844EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2018/04/26 10:18 a.m.31 views

CVE-2017-17833

A use-after-free flaw in OpenSLP 1.x and 2.x baselines was discovered in the ProcessSrvRqst function. A failure to update a local pointer may lead to heap corruption. A remote attacker may be able to leverage this flaw to gain remote code execution...

9.8CVSS2AI score0.00844EPSS
Exploits0References2
Rows per page
Query Builder