All packages
OpenSLP 1.2.1 vulnerabilities
3 known CVE vulnerabilities in OpenSLP 1.2.1, translated and rated.
- CVE-2015-5177High
A double free vulnerability in the SLPDKnownDAAdd function in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.
- CVE-2016-4912High
The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service via a NULL pointer dereference, leading to a system crash. This can be achieved by sending a large number of crafted packets, triggering a memory allocation failure.
- CVE-2016-7567Critical
Buffer overflow in the SLPFoldWhiteSpace function in OpenSLP 2.0 may allow remote attackers to have unspecified impact via a crafted string.