Unscored severity · published May 2, 2005
CVE-2005-0769
Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets
–
CVSS
2.6%
EPSS
No
On KEV
Description
Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openslp · Openslp
1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; 1.0.6; +9 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0769
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0769
Patch
http://secunia.com/advisories/14561
secunia.com
http://secunia.com/advisories/22128
www.gentoo.org
http://www.gentoo.org/security/en/glsa/glsa-200503-25.xml
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDKSA-2005:055
www.novell.com
http://www.novell.com/linux/security/advisories/2005_15_openslp.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/447537/100/0/threaded
More from Openslp
9.8
CVE-2019-5544
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
9.8
CVE-2017-17833
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution…
9.8
CVE-2016-7567
Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string
7.5
CVE-2012-4428
openslp: SLPIntersectStringList()' Function has a DoS vulnerability
7.5
CVE-2015-5177
Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package