OpenSLP vulnerabilities
4 known CVE vulnerabilities in OpenSLP, translated and rated.
- CVE-2015-5177High
A double free vulnerability in the SLPDKnownDAAdd function in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.
- CVE-2016-4912High
The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service via a NULL pointer dereference, leading to a system crash. This can be achieved by sending a large number of crafted packets, triggering a memory allocation failure.
- CVE-2019-5544CriticalActively exploited
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
- CVE-2016-7567Critical
Buffer overflow in the SLPFoldWhiteSpace function in OpenSLP 2.0 may allow remote attackers to have unspecified impact via a crafted string.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS