CVE-2015-5177

CVE-2015-5177 describes a double-free vulnerability in OpenSLP 1.2.1 where the SLPDProcessMessage() routine can be triggered by a crafted package, leading to remote denial of service (crash). Multiple sources corroborate a remote-exploitation vector via OpenSLP, with affected products including O...

CVE-2015-5177

Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpdknownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service crash via a crafted package...