Remote Code Execution (RCE)

🗓️ 15 Jan 2019 09:24:30Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 41 Views

openslp remote code execution vulnerability in 1.0.2 and 1.1.

Reporter	Title	Published	Views	Family All 106
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerability in OpenSLP (CVE-2017-17833)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module (IMM) is affected by vulnerability in OpenSLP (CVE-2017-17833)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in OpenSLP affects PowerKVM	17 Dec 201814:25	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in OpenSLP affects the IBM FlashSystem models V840 and V9000	28 Jun 201916:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru is affected by vulnerability in OpenSLP (CVE-2017-17833)	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSLP affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( CVE-2017-17833)	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Chassis Management Module (CMM) is affected by OpenSLP vulnerability (CVE-2017-17833)	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerability in OpenSLP (CVE-2017-17833)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM NeXtScale Fan Power Controller (FPC) is affected by OpenSLP vulnerability (CVE-2017-17833)	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by a vulnerability in OpenSLP (CVE-2017-17833)	7 Dec 202322:45	–	ibm

Vulners

Node

openslp openslpMatch2.0.0_2.el6

openslp openslpMatch2.0_0.2.beta2.el6

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2018/04/msg00029.html
access	www.access.redhat.com/errata/RHSA-2018:2308
access	www.access.redhat.com/security/updates/classification/
security	www.security.gentoo.org/glsa/202005-12
sourceforge	www.sourceforge.net/p/openslp/mercurial/ci/151f07745901cbdba6e00e4889561b4083250da1/
support	www.support.lenovo.com/us/en/solutions/LEN-18247
access	www.access.redhat.com/errata/RHSA-2018:2240
usn	www.usn.ubuntu.com/3708-1/

15 May 2020 05:45Current

9.7High risk

Vulners AI Score9.7

CVSS 27.5

CVSS 39.8

EPSS0.0389