Red Hat Security AdvisoryRHSA-2019:4240
openslp security update
Released 2019-12-16 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openslp-1:2.0.0-8.el7_7, openslp-server-1:2.0.0-8.el7_7
- Red Hat Enterprise Linux Client Optional (v. 7) openslp-devel-1:2.0.0-8.el7_7
- Red Hat Enterprise Linux ComputeNode (v. 7) openslp-1:2.0.0-8.el7_7, openslp-server-1:2.0.0-8.el7_7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openslp-devel-1:2.0.0-8.el7_7
- Red Hat Enterprise Linux Server (v. 7) openslp-1:2.0.0-8.el7_7, openslp-1:2.0.0-8.el7_7.ppc, openslp-server-1:2.0.0-8.el7_7
- Red Hat Enterprise Linux Server Optional (v. 7) openslp-devel-1:2.0.0-8.el7_7, openslp-devel-1:2.0.0-8.el7_7.ppc
- Red Hat Enterprise Linux Workstation (v. 7) openslp-1:2.0.0-8.el7_7, openslp-server-1:2.0.0-8.el7_7
- Red Hat Enterprise Linux Workstation Optional (v. 7) openslp-devel-1:2.0.0-8.el7_7
Fixes 1 record
Priority CRITICAL 100KEV
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.98129 · Published 2019-12-06 · Fixed CWE-787