CVEvulnerability

CVE-2017-17833

9.8 CRITICAL Published 2018-04-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-04-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.

Affected configurations

• openslp openslp 1.0.2 • openslp openslp 1.1.0 • debian debian linux 7.0 • canonical ubuntu linux 14.04 • canonical ubuntu linux 16.04 • redhat enterprise linux desktop 6.0 • redhat enterprise linux desktop 7.0 • redhat enterprise linux server 6.0 • redhat enterprise linux server 7.0 • redhat enterprise linux server aus 7.6 • redhat enterprise linux server eus 7.5 • redhat enterprise linux server eus 7.6 • redhat enterprise linux server tus 7.6 • redhat enterprise linux workstation 6.0 • redhat enterprise linux workstation 7.0 • lenovo thinkserver rd350g firmware • lenovo thinkserver rd350x firmware • lenovo thinkserver rd450x firmware • lenovo thinksystem hr630x firmware • lenovo thinksystem hr650x firmware • lenovo thinksystem sr630 firmware • lenovo flex system fc3171 8gb san switch firmware (< 9.1.13.02.00) • lenovo storage n3310 firmware (< 4.53.351) • lenovo storage n4610 firmware (< 4.53.351) • lenovo bm nextscale fan power controller (< 24p-2.15) • lenovo cmm (< 1.8.0) • lenovo fan power controller (< 30r-1.13) • lenovo imm1 (< 1.55) • lenovo imm2 (< 4.70) • lenovo xclarity administrator (< 1.4.0) • lenovo thinkserver rd340 firmware (< 50.00) • lenovo thinkserver rd350 firmware (< 4.53.351) • lenovo thinkserver rd440 firmware (<= 50.00) • lenovo thinkserver rd450 firmware (< 4.53.351) • lenovo thinkserver rd550 firmware (< 4.53.351) • lenovo thinkserver rd540 firmware (< 50.00) • lenovo thinkserver rd640 firmware (< 50.00) • lenovo thinkserver rd650 firmware (< 4.53.351) • lenovo thinkserver rq750 firmware (< 1.40) • lenovo thinkserver rs160 firmware (< 2.32) • lenovo thinkserver sd350 firmware • lenovo thinkserver td340 firmware (< 46.00) • lenovo thinkserver td350 firmware (< 4.53.351) • lenovo thinkserver ts460 firmware (< 2.32)

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References