CVE-2015-5177

Опубликовано: 06 авг. 2015

Источник: redhat

CVSS2: 4.3

Описание

Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 6	openslp	Not affected
Red Hat Enterprise Linux 7	openslp	Not affected

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-416

https://bugzilla.redhat.com/show_bug.cgi?id=1251064openslp: double free in SLPDProcessMessage()

4.3 Medium

CVSS2

Связанные уязвимости

CVE-2015-5177

CVSS3: 7.5

ubuntu

больше 8 лет назад

Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.

CVE-2015-5177

CVSS3: 7.5

nvd

больше 8 лет назад

Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.

CVE-2015-5177

CVSS3: 7.5

debian

больше 8 лет назад

Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_ ...

GHSA-3pvr-5fcv-fj5r

CVSS3: 7.5

github

больше 3 лет назад

Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.

4.3 Medium

CVSS2