OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade openslp-debuginfoUpgrade openslp-develUpgrade openslpUpgrade openslp-server | Apr 27, 2020 | Apr 23, 2018 |
| Centos_linux | — | Upgrade openslpUpgrade openslp-debuginfoUpgrade openslp-serverUpgrade openslp-devel | Jul 27, 2018 | Apr 23, 2018 |
| Debian | — | Upgrade openslp-dfsg | Feb 25, 2019 | Apr 23, 2018 |
| Gentoo Linux | — | Upgrade net-misc/openslp. | Jun 15, 2020 | Apr 23, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openslp-serverUpgrade openslp | Jul 3, 2018 | Apr 23, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openslp-serverUpgrade openslp | Jul 3, 2018 | Apr 23, 2018 |
| Oracle_linux | — | Upgrade openslp-serverUpgrade openslpUpgrade openslp-devel | Aug 1, 2018 | Apr 19, 2018 |
| Redhat_linux | — | Upgrade openslp-develUpgrade openslp-serverUpgrade openslpUpgrade openslp-debuginfo | Jul 24, 2018 | Apr 23, 2018 |
| Suse | — | Upgrade openslp-32bitUpgrade openslpUpgrade openslp-develUpgrade openslp-serverUpgrade openslp-x86Upgrade libslp1-openssl1Upgrade libslp1-openssl1-32bit | Jul 10, 2018 | Apr 23, 2018 |
| Ubuntu | — | Upgrade libslp1 | Jul 13, 2018 | Apr 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub