CVE-2017-17833 - CVE House
Back to Database
Status published Critical CVE-2017-17833

OpenSLP releases in the 1.0.2 and 1.1.0 code streams have...

Vulnerability Description

OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-17833

Credits & Attribution

No credits recorded in the NVD database.

References

More from openslp

View All →
CVE-2016-7567
Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP...
Critical 9.8
CVE-2016-4912
The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote...
High 7.5
CVE-2015-5177
Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in...
High 7.5
CVE-2010-3609
The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other...
Medium 5
CVE-2005-0769
Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers...
High 7.5

Affected Vendor

Affected Software

openslp, debian linux, ubuntu linux, enterprise linux desktop, enterprise linux server, enterprise linux server aus, enterprise linux server eus, enterprise linux server tus, enterprise linux workstation, thinkserver rd350g firmware, thinkserver rd350x firmware, thinkserver rd450x firmware, thinksystem hr630x firmware, thinksystem hr650x firmware, thinksystem sr630 firmware, flex system fc3171 8gb san switch firmware, storage n3310 firmware, storage n4610 firmware, bm nextscale fan power controller, cmm, fan power controller, imm1, imm2, xclarity administrator, thinkserver rd340 firmware, thinkserver rd350 firmware, thinkserver rd440 firmware, thinkserver rd450 firmware, thinkserver rd550 firmware, thinkserver rd540 firmware, thinkserver rd640 firmware, thinkserver rd650 firmware, thinkserver rq750 firmware, thinkserver rs160 firmware, thinkserver sd350 firmware, thinkserver td340 firmware, thinkserver td350 firmware, thinkserver ts460 firmware
Vulnerable Versions:
1.0.2, 1.1.0, 7.0, 14.04, 16.04, 6.0, 7.6, 7.5, 0

Timeline

Official Publish: April 23rd, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.