CVE-2015-5177
Fixed in a distro release EPSS 6%
Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.
Products: openslp, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | openslp-dfsg | 1.2.1-7.8+deb6u1 |
| Debian 7 | openslp-dfsg | 1.2.1-9+deb7u1 |
| Debian 8 | openslp-dfsg | 1.2.1-10+deb8u1 |
| Ubuntu 14.04 LTS | openslp-dfsg | 1.2.1-9ubuntu0.2 |