OP
Product
Openslp
On CISA KEVExploited in the wildRansomware-linked
9
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 0Low 0
Watch
Add Openslp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-5544 RansomwareIn wildKEV | 9.8 | Dec 6 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Affected: through 2.0.0 |
| CVE-2017-17833 | 9.8 | Apr 23 | OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution… Affected: 1.0.2; 1.1.0 |
| CVE-2016-7567 | 9.8 | Jan 23 | Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string Affected: 2.0.0 |
Showing 3
