Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-17833
HistoryApr 23, 2018 - 6:29 p.m.

CVE-2017-17833

2018-04-2318:29:00
CWE-119
[email protected]
web.nvd.nist.gov
91
cve-2017-17833
openslp
memory corruption
denial of service
remote code execution
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.8%

JSON

OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.

Affected configurations

NVD
Node
openslpopenslpMatch1.0.2
OR
openslpopenslpMatch1.1.0
Node
debiandebian_linuxMatch7.0
Node
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch16.04lts
Node
redhatenterprise_linux_desktopMatch6.0
OR
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_serverMatch6.0
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_server_ausMatch7.6
OR
redhatenterprise_linux_server_eusMatch7.5
OR
redhatenterprise_linux_server_eusMatch7.6
OR
redhatenterprise_linux_server_tusMatch7.6
OR
redhatenterprise_linux_workstationMatch6.0
OR
redhatenterprise_linux_workstationMatch7.0
Node
lenovothinkserver_rd350g_firmwareMatch-
AND
lenovothinkserver_rd350gMatch-
Node
lenovothinkserver_rd350x_firmwareMatch-
AND
lenovothinkserver_rd350xMatch-
Node
lenovothinkserver_rd450x_firmwareMatch-
AND
lenovothinkserver_rd450xMatch-
Node
lenovothinksystem_hr630x_firmwareMatch-
AND
lenovothinksystem_hr630xMatch-
Node
lenovothinksystem_hr650x_firmwareMatch-
AND
lenovothinksystem_hr650xMatch-
Node
lenovothinksystem_sr630_firmwareMatch-
AND
lenovothinksystem_sr630Match-
Node
lenovoflex_system_fc3171_8gb_san_switch_firmwareRange<9.1.13.02.00
AND
lenovoflex_system_fc3171_8gb_san_switchMatch-
Node
lenovostorage_n3310_firmwareRange<4.53.351
AND
lenovostorage_n3310Match-
Node
lenovostorage_n4610_firmwareRange<4.53.351
AND
lenovostorage_n4610Match-
Node
lenovobm_nextscale_fan_power_controllerRange<24p-2.15
OR
lenovocmmRange<1.8.0
OR
lenovofan_power_controllerRange<30r-1.13
OR
lenovoimm1Range<1.55
OR
lenovoimm2Range<4.70
OR
lenovoxclarity_administratorRange<1.4.0
Node
lenovothinkserver_rd340_firmwareRange<50.00
AND
lenovothinkserver_rd340Match-
Node
lenovothinkserver_rd350_firmwareRange<4.53.351
AND
lenovothinkserver_rd350Match-
Node
lenovothinkserver_rd440_firmwareRange≤50.00
AND
lenovothinkserver_rd440Match-
Node
lenovothinkserver_rd450_firmwareRange<4.53.351
AND
lenovothinkserver_rd450Match-
Node
lenovothinkserver_rd550_firmwareRange<4.53.351
AND
lenovothinkserver_rd550Match-
Node
lenovothinkserver_rd540_firmwareRange<50.00
AND
lenovothinkserver_rd540Match-
Node
lenovothinkserver_rd640_firmwareRange<50.00
AND
lenovothinkserver_rd640Match-
Node
lenovothinkserver_rd650_firmwareRange<4.53.351
AND
lenovothinkserver_rd650Match-
Node
lenovothinkserver_rq750_firmwareRange<1.40
AND
lenovothinkserver_rq750Match-
Node
lenovothinkserver_rs160_firmwareRange<2.32
AND
lenovothinkserver_rs160Match-
Node
lenovothinkserver_sd350_firmwareMatch-
AND
lenovothinkserver_sd350Match-
Node
lenovothinkserver_td340_firmwareRange<46.00
AND
lenovothinkserver_td340Match-
Node
lenovothinkserver_td350_firmwareRange<4.53.351
AND
lenovothinkserver_td350Match-
Node
lenovothinkserver_ts460_firmwareRange<2.32
AND
lenovothinkserver_ts460Match-

Related

centos 2
nessus 27
fedora 1
prion 1
ibm 11
openvas 17
suse 2
veracode 1
f5 1
osv 2
cvelist 1
oraclelinux 2
lenovo 2
mageia 1
debian 2
amazon 1
ubuntucve 1
redhat 2
nvd 2
redhatcve 2
ubuntu 1
cve 1
gentoo 1
centos
centos
openslp security update
2018-08-09 15:08:57
openslp security update
2018-07-25 16:10:16
nessus
nessus
NewStart CGSL MAIN 4.05 : openslp Vulnerability (NS-SA-2019-0128)
2019-08-12 00:00:00
Debian DLA-1364-1 : openslp-dfsg security update
2018-04-26 00:00:00
Scientific Linux Security Update : openslp on SL7.x x86_64 (20180723)
2018-07-24 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: openslp-2.0.0-18.fc28
2018-07-19 18:06:13
prion
prion
Remote code execution
2018-04-23 18:29:00
ibm
ibm
Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerability in OpenSLP (CVE-2017-17833)
2023-04-14 14:32:25
Security Bulletin: IBM NeXtScale Fan Power Controller (FPC) is affected by OpenSLP vulnerability (CVE-2017-17833)
2019-01-31 02:40:01
Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by a vulnerability in OpenSLP (CVE-2017-17833)
2023-12-07 22:45:02
openvas
openvas
Debian: Security Advisory (DLA-1364-1)
2018-04-26 00:00:00
Fedora Update for openslp FEDORA-2018-05acd3c734
2018-07-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:2991-1)
2021-04-19 00:00:00
suse
suse
Security update for openslp (important)
2018-07-14 03:08:08
Security update for openslp (important)
2018-09-24 12:11:41
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:24:30
f5
f5
K13314257 : slpd vulnerability CVE-2017-17833
2018-09-26 00:00:00
osv
osv
openslp-dfsg - security update
2018-04-25 00:00:00
openslp-dfsg - security update
2019-12-08 00:00:00
cvelist
cvelist
CVE-2017-17833
2018-04-23 18:00:00
oraclelinux
oraclelinux
openslp security update
2018-07-31 00:00:00
openslp security update
2018-07-23 00:00:00
lenovo
lenovo
OpenSLP Heap Memory Corruption - Lenovo Support US
2019-01-12 21:23:09
OpenSLP Heap Memory Corruption - US
2018-04-26 15:03:00
mageia
mageia
Updated openslp packages fix security vulnerability
2018-08-18 01:27:23
debian
debian
[SECURITY] [DLA 1364-1] openslp-dfsg security update
2018-04-25 20:20:59
[SECURITY] [DLA 2025-1] openslp-dfsg security update
2019-12-08 12:51:22
amazon
amazon
Important: openslp
2018-08-21 17:11:00
ubuntucve
ubuntucve
CVE-2017-17833
2018-04-23 00:00:00
redhat
redhat
(RHSA-2018:2240) Important: openslp security update
2018-07-23 13:12:36
(RHSA-2018:2308) Important: openslp security update
2018-07-31 17:16:30
nvd
nvd
CVE-2017-17833
2018-04-23 18:29:00
CVE-2018-12938
2018-06-28 23:29:00
redhatcve
redhatcve
CVE-2017-17833
2018-04-26 10:18:40
CVE-2018-12938
2018-06-29 04:22:04
ubuntu
ubuntu
OpenSLP vulnerabilities
2018-07-09 00:00:00
cve
cve
CVE-2018-12938
2018-06-28 23:29:00
gentoo
gentoo
OpenSLP: Multiple vulnerabilities
2020-05-14 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.8%

JSON
Related for CVE-2017-17833
centos2nessus27fedora1prion1ibm11openvas17suse2veracode1f51osv2cvelist1oraclelinux2lenovo2mageia1debian2amazon1ubuntucve1redhat2nvd2redhatcve2ubuntu1cve1gentoo1