OpenSLP vulnerability

2011-04-2000:00:00

ubuntu.com

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.371 Low

EPSS

Percentile

97.2%

JSON

Releases

Ubuntu 10.10
Ubuntu 10.04
Ubuntu 9.10
Ubuntu 8.04
Ubuntu 6.06

Packages

openslp - OpenSLP is an implementation of the Service Location Protocol
openslp-dfsg - OpenSLP is an implementation of the Service Location Protocol

Details

It was discovered that OpenSLP incorrectly handled certain corrupted
messages. A remote attacker could send a specially crafted packet to
the OpenSLP server and cause it to hang, leading to a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchlibslp1< 1.2.1-7.5ubuntu0.1UNKNOWN
Ubuntu9.10noarchlibslp-dev< 1.2.1-7.5ubuntu0.1UNKNOWN
Ubuntu9.10noarchslpd< 1.2.1-7.5ubuntu0.1UNKNOWN
Ubuntu9.10noarchslptool< 1.2.1-7.5ubuntu0.1UNKNOWN
Ubuntu8.04noarchlibslp1< 1.2.1-7.1ubuntu0.2UNKNOWN
Ubuntu8.04noarchlibslp-dev< 1.2.1-7.1ubuntu0.2UNKNOWN
Ubuntu8.04noarchslpd< 1.2.1-7.1ubuntu0.2UNKNOWN
Ubuntu8.04noarchslptool< 1.2.1-7.1ubuntu0.2UNKNOWN
Ubuntu6.06noarchlibslp1< 1.2.1-5ubuntu0.2UNKNOWN
Ubuntu6.06noarchlibslp-dev< 1.2.1-5ubuntu0.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.10	noarch	libslp1	< 1.2.1-7.5ubuntu0.1	UNKNOWN
Ubuntu	9.10	noarch	libslp-dev	< 1.2.1-7.5ubuntu0.1	UNKNOWN
Ubuntu	9.10	noarch	slpd	< 1.2.1-7.5ubuntu0.1	UNKNOWN
Ubuntu	9.10	noarch	slptool	< 1.2.1-7.5ubuntu0.1	UNKNOWN
Ubuntu	8.04	noarch	libslp1	< 1.2.1-7.1ubuntu0.2	UNKNOWN
Ubuntu	8.04	noarch	libslp-dev	< 1.2.1-7.1ubuntu0.2	UNKNOWN
Ubuntu	8.04	noarch	slpd	< 1.2.1-7.1ubuntu0.2	UNKNOWN
Ubuntu	8.04	noarch	slptool	< 1.2.1-7.1ubuntu0.2	UNKNOWN
Ubuntu	6.06	noarch	libslp1	< 1.2.1-5ubuntu0.2	UNKNOWN
Ubuntu	6.06	noarch	libslp-dev	< 1.2.1-5ubuntu0.2	UNKNOWN