Openslp

9 CVEs across 1 Openslp products. Browse Openslp vulnerabilities, severities, and proof-of-concept exploits.

Openslp products with known CVEs

ProductCVEs
Openslp9
Openslp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-5544Critical9.82019-12-06OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical sever…
CVE-2012-4428High7.52019-12-02openslp: SLPIntersectStringList()' Function has a DoS vulnerability
CVE-2017-17833Critical9.82018-04-23OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote c…
CVE-2015-5177High7.52017-10-22Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) v…
CVE-2016-4912High7.52017-03-27The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a large…
CVE-2016-7567Critical9.82017-01-23Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted strin…
CVE-2010-36092011-03-11The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SLPD) in VM…
CVE-2005-07692005-05-02Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets.
CVE-2003-08752003-11-17Symbolic link vulnerability in the slpd script slpd.all_init for OpenSLP before 1.0.11 allows local users to overwrite arbitrary files via the route.check temp…