CVE-2017-17833

Fixed in a distro release EPSS 4%

OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.

Published 2018-04-23 · CVE record · OSV

Products: openslp, debian_linux, canonical ubuntu_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, lenovo thinkserver_rd350g_firmware, lenovo thinkserver_rd350x_firmware, lenovo thinkserver_rd450x_firmware, lenovo thinksystem_hr630x_firmware, lenovo thinksystem_hr650x_firmware, lenovo thinksystem_sr630_firmware, lenovo flex_system_fc3171_8gb_san_switch_firmware, lenovo storage_n3310_firmware, lenovo storage_n4610_firmware, lenovo bm_nextscale_fan_power_controller, lenovo cmm, lenovo fan_power_controller, lenovo imm1, lenovo imm2, lenovo xclarity_administrator, lenovo thinkserver_rd340_firmware, lenovo thinkserver_rd350_firmware, lenovo thinkserver_rd440_firmware, lenovo thinkserver_rd450_firmware, lenovo thinkserver_rd550_firmware, lenovo thinkserver_rd540_firmware, lenovo thinkserver_rd640_firmware, lenovo thinkserver_rd650_firmware, lenovo thinkserver_rq750_firmware, lenovo thinkserver_rs160_firmware, lenovo thinkserver_sd350_firmware, lenovo thinkserver_td340_firmware, lenovo thinkserver_td350_firmware, lenovo thinkserver_ts460_firmware

Distro releases