OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory…
Priority MEDIUM 49CWE-119Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-119 and the CVSS impact.
Summary
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.
Why it matters now
EPSS 0.03759 89th percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 67
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openslp:openslp:1.0.2:*:*:*:*:*:*:* | 1.0.2 | Vulnerable | Openslp |
| cpe:2.3:a:openslp:openslp:1.1.0:*:*:*:*:*:*:* | 1.1.0 | Vulnerable | Openslp |
| cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Debian |
| cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* | 14.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* | 16.04 | Vulnerable | Canonical |
| cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* | 7.6 | Vulnerable | Red Hat |
- cpe:2.3:a:openslp:openslp:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Openslp
- cpe:2.3:a:openslp:openslp:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·Openslp
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Debian
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
Show 57 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* | 7.5 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* | 7.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* | 7.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:lenovo:thinkserver_rd350g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_rd350g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkserver_rd350x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_rd350x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkserver_rd450x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_rd450x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinksystem_hr630x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_hr630x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinksystem_hr650x_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_hr650x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinksystem_sr630_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:flex_system_fc3171_8gb_san_switch_firmware:*:*:*:*:*:*:*:* | before 9.1.13.02.00 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:flex_system_fc3171_8gb_san_switch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:storage_n3310_firmware:*:*:*:*:*:*:*:* | before 4.53.351 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:storage_n3310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:storage_n4610_firmware:*:*:*:*:*:*:*:* | before 4.53.351 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:storage_n4610:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:a:lenovo:bm_nextscale_fan_power_controller:*:*:*:*:*:*:*:* | before 24p-2.15 | Vulnerable | Lenovo |
| cpe:2.3:a:lenovo:cmm:*:*:*:*:*:*:*:* | before 1.8.0 | Vulnerable | Lenovo |
| cpe:2.3:a:lenovo:fan_power_controller:*:*:*:*:*:*:*:* | before 30r-1.13 | Vulnerable | Lenovo |
| cpe:2.3:a:lenovo:imm1:*:*:*:*:*:*:*:* | before 1.55 | Vulnerable | Lenovo |
| cpe:2.3:a:lenovo:imm2:*:*:*:*:*:*:*:* | before 4.70 | Vulnerable | Lenovo |
| cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:* | before 1.4.0 | Vulnerable | Lenovo |
| cpe:2.3:o:lenovo:thinkserver_rd340_firmware:*:*:*:*:*:*:*:* | before 50.00 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_rd340:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkserver_rd350_firmware:*:*:*:*:*:*:*:* | before 4.53.351 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_rd350:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkserver_rd440_firmware:*:*:*:*:*:*:*:* | up to 50.00 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_rd440:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkserver_rd450_firmware:*:*:*:*:*:*:*:* | before 4.53.351 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_rd450:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkserver_rd550_firmware:*:*:*:*:*:*:*:* | before 4.53.351 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_rd550:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkserver_rd540_firmware:*:*:*:*:*:*:*:* | before 50.00 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_rd540:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkserver_rd640_firmware:*:*:*:*:*:*:*:* | before 50.00 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_rd640:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkserver_rd650_firmware:*:*:*:*:*:*:*:* | before 4.53.351 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_rd650:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkserver_rq750_firmware:*:*:*:*:*:*:*:* | before 1.40 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_rq750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkserver_rs160_firmware:*:*:*:*:*:*:*:* | before 2.32 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_rs160:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkserver_sd350_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_sd350:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkserver_td340_firmware:*:*:*:*:*:*:*:* | before 46.00 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_td340:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkserver_td350_firmware:*:*:*:*:*:*:*:* | before 4.53.351 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_td350:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkserver_ts460_firmware:*:*:*:*:*:*:*:* | before 2.32 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkserver_ts460:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:lenovo:thinkserver_rd350g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_rd350g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkserver_rd350x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_rd350x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkserver_rd450x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_rd450x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinksystem_hr630x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_hr630x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinksystem_hr650x_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_hr650x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinksystem_sr630_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:flex_system_fc3171_8gb_san_switch_firmware:*:*:*:*:*:*:*:* Versions before 9.1.13.02.00 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:flex_system_fc3171_8gb_san_switch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:storage_n3310_firmware:*:*:*:*:*:*:*:* Versions before 4.53.351 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:storage_n3310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:storage_n4610_firmware:*:*:*:*:*:*:*:* Versions before 4.53.351 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:storage_n4610:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:a:lenovo:bm_nextscale_fan_power_controller:*:*:*:*:*:*:*:* Versions before 24p-2.15 Vulnerable ·Lenovo
- cpe:2.3:a:lenovo:cmm:*:*:*:*:*:*:*:* Versions before 1.8.0 Vulnerable ·Lenovo
- cpe:2.3:a:lenovo:fan_power_controller:*:*:*:*:*:*:*:* Versions before 30r-1.13 Vulnerable ·Lenovo
- cpe:2.3:a:lenovo:imm1:*:*:*:*:*:*:*:* Versions before 1.55 Vulnerable ·Lenovo
- cpe:2.3:a:lenovo:imm2:*:*:*:*:*:*:*:* Versions before 4.70 Vulnerable ·Lenovo
- cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:* Versions before 1.4.0 Vulnerable ·Lenovo
- cpe:2.3:o:lenovo:thinkserver_rd340_firmware:*:*:*:*:*:*:*:* Versions before 50.00 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_rd340:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkserver_rd350_firmware:*:*:*:*:*:*:*:* Versions before 4.53.351 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_rd350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkserver_rd440_firmware:*:*:*:*:*:*:*:* Versions up to 50.00 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_rd440:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkserver_rd450_firmware:*:*:*:*:*:*:*:* Versions before 4.53.351 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_rd450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkserver_rd550_firmware:*:*:*:*:*:*:*:* Versions before 4.53.351 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_rd550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkserver_rd540_firmware:*:*:*:*:*:*:*:* Versions before 50.00 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_rd540:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkserver_rd640_firmware:*:*:*:*:*:*:*:* Versions before 50.00 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_rd640:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkserver_rd650_firmware:*:*:*:*:*:*:*:* Versions before 4.53.351 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_rd650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkserver_rq750_firmware:*:*:*:*:*:*:*:* Versions before 1.40 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_rq750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkserver_rs160_firmware:*:*:*:*:*:*:*:* Versions before 2.32 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_rs160:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkserver_sd350_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_sd350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkserver_td340_firmware:*:*:*:*:*:*:*:* Versions before 46.00 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_td340:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkserver_td350_firmware:*:*:*:*:*:*:*:* Versions before 4.53.351 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_td350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkserver_ts460_firmware:*:*:*:*:*:*:*:* Versions before 2.32 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkserver_ts460:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Remediation
Red Hat 2 advisories
- RHSA-2018:2308 Released 2018-07-31 · Red Hat rating Importantopenslp security update
- Red Hat Enterprise Linux Desktop (v. 6) openslp-1:2.0.0-3.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) openslp-devel-1:2.0.0-3.el6, openslp-server-1:2.0.0-3.el6
- Red Hat Enterprise Linux HPC Node (v. 6) openslp-1:2.0.0-3.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openslp-devel-1:2.0.0-3.el6, openslp-server-1:2.0.0-3.el6
- Red Hat Enterprise Linux Server (v. 6) openslp-1:2.0.0-3.el6, openslp-1:2.0.0-3.el6.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) openslp-devel-1:2.0.0-3.el6, openslp-devel-1:2.0.0-3.el6.ppc, openslp-server-1:2.0.0-3.el6
- Red Hat Enterprise Linux Workstation (v. 6) openslp-1:2.0.0-3.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) openslp-devel-1:2.0.0-3.el6, openslp-server-1:2.0.0-3.el6
- RHSA-2018:2240 Released 2018-07-23 · Red Hat rating Importantopenslp security update
- Red Hat Enterprise Linux Client (v. 7) openslp-1:2.0.0-7.el7_5, openslp-server-1:2.0.0-7.el7_5
- Red Hat Enterprise Linux Client Optional (v. 7) openslp-devel-1:2.0.0-7.el7_5
- Red Hat Enterprise Linux ComputeNode (v. 7) openslp-1:2.0.0-7.el7_5, openslp-server-1:2.0.0-7.el7_5
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openslp-devel-1:2.0.0-7.el7_5
- Red Hat Enterprise Linux Server (v. 7) openslp-1:2.0.0-7.el7_5, openslp-1:2.0.0-7.el7_5.ppc, openslp-server-1:2.0.0-7.el7_5
- Red Hat Enterprise Linux Server Optional (v. 7) openslp-devel-1:2.0.0-7.el7_5, openslp-devel-1:2.0.0-7.el7_5.ppc
- Red Hat Enterprise Linux Workstation (v. 7) openslp-1:2.0.0-7.el7_5, openslp-server-1:2.0.0-7.el7_5
- Red Hat Enterprise Linux Workstation Optional (v. 7) openslp-devel-1:2.0.0-7.el7_5
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) openslp-1:2.0.0-7.el7_5, openslp-server-1:2.0.0-7.el7_5
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) openslp-devel-1:2.0.0-7.el7_5
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2018:2240 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2018:2240 |
| Red Hat Enterprise Linux ComputeNode (v. 7) | Fixed | RHSA-2018:2240 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2018:2240 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2018:2308 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2018:2308 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2018:2308 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2018:2308 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2018:2308 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2018:2240 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2018:2308 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2018:2240 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2018:2308 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2018:2240 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2018:2308 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2018:2240 |
| Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) | Fixed | RHSA-2018:2240 |
| Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) | Fixed | RHSA-2018:2240 |
Not affected: 1 product
- Red Hat Enterprise Linux 8
Timeline
- 2026-10-02 Threatist record created from CVE-2017-17833
- 2026-10-03 Alias added: GHSA-r3mh-hjcg-756h
References
Sources
- CVE-2017-17833 · CVE Program
- CVE-2017-17833 · NVD
- FIRST EPSS
- GHSA-r3mh-hjcg-756h · GitHub Advisory Database · CC BY 4.0
- CVE-2017-17833 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences