OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-openslpamazon-linux-ami-2-upgrade-openslp-debuginfoamazon-linux-ami-2-upgrade-openslp-develamazon-linux-ami-2-upgrade-openslp-server | Apr 27, 2020 | Apr 23, 2018 | |
| Centos_linux | — | centos-upgrade-openslpcentos-upgrade-openslp-debuginfocentos-upgrade-openslp-develcentos-upgrade-openslp-server | Jul 27, 2018 | Apr 23, 2018 |
| Debian | debian-upgrade-openslp-dfsg | Feb 25, 2019 | Apr 23, 2018 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-openslp | Jun 15, 2020 | Apr 23, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-openslphuawei-euleros-2_0_sp2-upgrade-openslp-server | Jul 3, 2018 | Apr 23, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-openslphuawei-euleros-2_0_sp3-upgrade-openslp-server | Jul 3, 2018 | Apr 23, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-openslporacle-linux-upgrade-openslp-develoracle-linux-upgrade-openslp-server | Aug 1, 2018 | Apr 19, 2018 |
| Redhat_linux | — | redhat-upgrade-openslpredhat-upgrade-openslp-debuginforedhat-upgrade-openslp-develredhat-upgrade-openslp-server | Jul 24, 2018 | Apr 23, 2018 |
| Suse | — | suse-upgrade-libslp1-openssl1suse-upgrade-libslp1-openssl1-32bitsuse-upgrade-openslpsuse-upgrade-openslp-32bitsuse-upgrade-openslp-develsuse-upgrade-openslp-serversuse-upgrade-openslp-x86 | Jul 10, 2018 | Apr 23, 2018 |
| Ubuntu | ubuntu-upgrade-libslp1 | Jul 13, 2018 | Apr 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub