Openslp
7 CVEs across 1 Openslp products. Browse Openslp vulnerabilities, severities, and proof-of-concept exploits.
Openslp products with known CVEs
Openslp CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2019-5544 | Critical | 9.8 | 2019-12-06 | OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical sever… |
CVE-2012-4428 | High | 7.5 | 2019-12-02 | openslp: SLPIntersectStringList()' Function has a DoS vulnerability |
CVE-2017-17833 | Critical | 9.8 | 2018-04-23 | OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote c… |
CVE-2015-5177 | High | 7.5 | 2017-10-22 | Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) v… |
CVE-2016-4912 | High | 7.5 | 2017-03-27 | The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a large… |
CVE-2016-7567 | Critical | 9.8 | 2017-01-23 | Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted strin… |
CVE-2010-3609 | | | 2011-03-11 | The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SLPD) in VM… |
CVE-2005-0769 | | | 2005-05-02 | Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets. |
CVE-2003-0875 | | | 2003-11-17 | Symbolic link vulnerability in the slpd script slpd.all_init for OpenSLP before 1.0.11 allows local users to overwrite arbitrary files via the route.check temp… |