CVE-2015-5177
HighSummary
A double free vulnerability in the SLPDKnownDAAdd function in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.
Risk Assessment
Attackers can exploit this vulnerability to trigger a denial of service, potentially leading to system downtime.
Recommendation
It is recommended to update OpenSLP to the latest version to mitigate this vulnerability and to monitor the system for unauthorized access attempts.
Other vulnerabilities in OpenSLP 1.2.1
See all- CVE-2016-4912High
The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service via a NULL pointer dereference, leading to a system crash. This can be achieved by sending a large number of crafted packets, triggering a memory allocation failure.
- CVE-2016-7567Critical
Buffer overflow in the SLPFoldWhiteSpace function in OpenSLP 2.0 may allow remote attackers to have unspecified impact via a crafted string.
Original NVD description (English source)
Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.