Red Hat Security AdvisoryRHSA-2018:2308
openslp security update
Released 2018-07-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) openslp-1:2.0.0-3.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) openslp-devel-1:2.0.0-3.el6, openslp-server-1:2.0.0-3.el6
- Red Hat Enterprise Linux HPC Node (v. 6) openslp-1:2.0.0-3.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openslp-devel-1:2.0.0-3.el6, openslp-server-1:2.0.0-3.el6
- Red Hat Enterprise Linux Server (v. 6) openslp-1:2.0.0-3.el6, openslp-1:2.0.0-3.el6.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) openslp-devel-1:2.0.0-3.el6, openslp-devel-1:2.0.0-3.el6.ppc, openslp-server-1:2.0.0-3.el6
- Red Hat Enterprise Linux Workstation (v. 6) openslp-1:2.0.0-3.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) openslp-devel-1:2.0.0-3.el6, openslp-server-1:2.0.0-3.el6
Fixes 1 record
Priority MEDIUM 49
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03759 · Published 2018-04-23 · Fixed CWE-119
