Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets.

Etkilenen sürümler

NVD sürüm aralıkları (katalogdaki ürünler için). Stack’ine sürümle eklersen eşleşme bunlarla yapılır.

• openslp openslp1.0_.0
• openslp openslp1.0.1
• openslp openslp1.0.10
• openslp openslp1.0.11
• openslp openslp1.0.2
• openslp openslp1.0.3
• openslp openslp1.0.4
• openslp openslp1.0.5
• openslp openslp1.0.6
• openslp openslp1.0.7
• openslp openslp1.0.8_a
• openslp openslp1.0.9_a
• openslp openslp1.1.5
• openslp openslp1.2_.0
• openslp openslp1.2.1

Aynı birincil ürünün en yüksek skorlu diğer kayıtları.

• CVE-2019-5544OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue.KEV
  98Hemen
• CVE-2016-7567Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact
  43Planlayın
• CVE-2017-17833OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-se
  40Planlayın
• CVE-2012-4428openslp: SLPIntersectStringList()' Function has a DoS vulnerability
  33İzleyin
• CVE-2015-5177Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial o
  32İzleyin
• CVE-2016-4912The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and
  32İzleyin

FIRST EPSS günlük puanı; yalnızca 0,01 ve üstü değişimler kaydedilir (adım grafiği).

Saldırı bağlamı

Bu zafiyet sınıfının (CWE) MITRE CAPEC saldırı desenleri ve ATT&CK teknikleri. Tespit kuralı ve tehdit avı için başlangıç noktası.

Bu CWE için MITRE'de CAPEC/ATT&CK eşlemesi yok.