CVE-2016-7567
CriticalSummary
Buffer overflow in the SLPFoldWhiteSpace function in OpenSLP 2.0 may allow remote attackers to have unspecified impact via a crafted string.
Risk Assessment
Attackers may exploit this vulnerability to execute remote code or destabilize the system, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to update OpenSLP to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in OpenSLP 2.0
See all- CVE-2015-5177High
A double free vulnerability in the SLPDKnownDAAdd function in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.
- CVE-2016-4912High
The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service via a NULL pointer dereference, leading to a system crash. This can be achieved by sending a large number of crafted packets, triggering a memory allocation failure.
Original NVD description (English source)
Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string.