Summary
It was discovered that OpenSLP did not properly validate URLs. A remote
attacker could use this issue to cause OpenSLP to crash or possibly execute
arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | openslp-dfsg | 1.2.1-11ubuntu0.16.04.2 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | openslp-dfsg | 1.2.1-9ubuntu0.3+esm1 |
Vulnerabilities 1
-
Critical 9.8
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity o…
KEV Nov 3, 2021
References
-
report
https://ubuntu.com/security/CVE-2019-5544