Skip to content
OpenAdvisories
Unscored USN-3708-1 2 CVEs

openslp-dfsg vulnerabilities

Published Jul 9, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that OpenSLP incorrectly handled certain memory
operations. A remote attacker could use this issue to cause OpenSLP to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS openslp-dfsg 1.2.1-9ubuntu0.3
Ubuntu · 16.04 LTS 16.04:LTS openslp-dfsg 1.2.1-11ubuntu0.16.04.1

Vulnerabilities 2

  • Unscored —
    CVE-2017-17833

    OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest its…

    openslp-dfsg Ubuntu
  • Unscored —
    CVE-2018-12938 Public exploit Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17833. Reason: This candidate is a duplicate of CVE-2017-17833. …

    openslp-dfsg Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2017-17833
  • report
    https://ubuntu.com/security/CVE-2018-12938