OP
Product
Openslp
On CISA KEVExploited in the wildRansomware-linked
9
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 0Low 0
Watch
Add Openslp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-5544 RansomwareIn wildKEV | 9.8 | Dec 6 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Affected: through 2.0.0 |
| CVE-2017-17833 | 9.8 | Apr 23 | OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution… Affected: 1.0.2; 1.1.0 |
| CVE-2016-7567 | 9.8 | Jan 23 | Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string Affected: 2.0.0 |
| CVE-2012-4428 | 7.5 | Dec 2 | openslp: SLPIntersectStringList()' Function has a DoS vulnerability Affected: 1.2.1 |
| CVE-2015-5177 | 7.5 | Oct 22 | Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package Affected: 1.2.1 |
| CVE-2016-4912 | 7.5 | Mar 27 | The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a large number of crafted… Affected: 2.0.0 |
| CVE-2010-3609 | – | Mar 11 | The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SLPD) in VMware ESX 4.0 and 4.1… Affected: 1.2.1 |
| CVE-2005-0769 | – | May 2 | Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets Affected: 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; 1.0.6; +9 more |
| CVE-2003-0875 | – | Nov 17 | Symbolic link vulnerability in the slpd script slpd.all_init for OpenSLP before 1.0.11 allows local users to overwrite arbitrary files via the route.check temporary file Affected: through 1.0.11 |
Showing 9