Red Hat Security AdvisoryRHSA-2018:2240
openslp security update
Released 2018-07-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openslp-1:2.0.0-7.el7_5, openslp-server-1:2.0.0-7.el7_5
- Red Hat Enterprise Linux Client Optional (v. 7) openslp-devel-1:2.0.0-7.el7_5
- Red Hat Enterprise Linux ComputeNode (v. 7) openslp-1:2.0.0-7.el7_5, openslp-server-1:2.0.0-7.el7_5
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openslp-devel-1:2.0.0-7.el7_5
- Red Hat Enterprise Linux Server (v. 7) openslp-1:2.0.0-7.el7_5, openslp-1:2.0.0-7.el7_5.ppc, openslp-server-1:2.0.0-7.el7_5
- Red Hat Enterprise Linux Server Optional (v. 7) openslp-devel-1:2.0.0-7.el7_5, openslp-devel-1:2.0.0-7.el7_5.ppc
- Red Hat Enterprise Linux Workstation (v. 7) openslp-1:2.0.0-7.el7_5, openslp-server-1:2.0.0-7.el7_5
- Red Hat Enterprise Linux Workstation Optional (v. 7) openslp-devel-1:2.0.0-7.el7_5
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) openslp-1:2.0.0-7.el7_5, openslp-server-1:2.0.0-7.el7_5
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) openslp-devel-1:2.0.0-7.el7_5
Fixes 1 record
Priority MEDIUM 49
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03759 · Published 2018-04-23 · Fixed CWE-119
