Advisory ROSA-SA-2021-1937

Software: openslp 2.0.0
OS: Cobalt 7.9

CVE-ID: CVE-2016-4912
CVE-Crit: HIGH
CVE-DESC: The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (dereferencing a null pointer and crashing) through a large number of created packets, causing a memory allocation failure.
CVE-STATUS: default
CVE-REV: default

CVE-ID: CVE-2016-7567
CVE-Crit: CRITICAL
CVE-DESC: Buffer overflow in SLPFoldWhiteSpace function in common / slp_compare.c in OpenSLP 2.0 allows remote attackers to have undefined impact via a crafted string.
CVE-STATUS: default
CVE-REV: default