CVE-2016-4912
HighSummary
The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service via a NULL pointer dereference, leading to a system crash. This can be achieved by sending a large number of crafted packets, triggering a memory allocation failure.
Risk Assessment
The organization may experience service outages, leading to loss of user trust and potential financial losses. Attackers could exploit this vulnerability to destabilize the system.
Recommendation
It is recommended to update OpenSLP to the latest version to mitigate this vulnerability. Additionally, monitoring network traffic for unusual patterns that may indicate attack attempts is advisable.
Other vulnerabilities in OpenSLP 2.0.0
See all- CVE-2015-5177High
A double free vulnerability in the SLPDKnownDAAdd function in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.
- CVE-2016-7567Critical
Buffer overflow in the SLPFoldWhiteSpace function in OpenSLP 2.0 may allow remote attackers to have unspecified impact via a crafted string.
Original NVD description (English source)
The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a large number of crafted packets, which triggers a memory allocation failure.