Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:2779-1

Опубликовано: 21 сент. 2018
Источник: suse-cvrf

Описание

Security update for openslp

This update for openslp fixes the following issues:

  • CVE-2017-17833: Prevent heap-related memory corruption issue which may have manifested itself as a denial-of-service or a remote code-execution vulnerability (bsc#1090638)
  • Prevent out of bounds reads in message parsing

Список пакетов

SUSE Enterprise Storage 4
openslp-2.0.0-18.15.1
openslp-32bit-2.0.0-18.15.1
openslp-server-2.0.0-18.15.1
SUSE Linux Enterprise Desktop 12 SP3
openslp-2.0.0-18.15.1
openslp-32bit-2.0.0-18.15.1
SUSE Linux Enterprise Server 12 SP1-LTSS
openslp-2.0.0-18.15.1
openslp-32bit-2.0.0-18.15.1
openslp-server-2.0.0-18.15.1
SUSE Linux Enterprise Server 12 SP2-LTSS
openslp-2.0.0-18.15.1
openslp-32bit-2.0.0-18.15.1
openslp-server-2.0.0-18.15.1
SUSE Linux Enterprise Server 12 SP3
openslp-2.0.0-18.15.1
openslp-32bit-2.0.0-18.15.1
openslp-server-2.0.0-18.15.1
SUSE Linux Enterprise Server 12-LTSS
openslp-2.0.0-18.15.1
openslp-32bit-2.0.0-18.15.1
openslp-server-2.0.0-18.15.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
openslp-2.0.0-18.15.1
openslp-32bit-2.0.0-18.15.1
openslp-server-2.0.0-18.15.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
openslp-2.0.0-18.15.1
openslp-32bit-2.0.0-18.15.1
openslp-server-2.0.0-18.15.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
openslp-2.0.0-18.15.1
openslp-32bit-2.0.0-18.15.1
openslp-server-2.0.0-18.15.1
SUSE Linux Enterprise Software Development Kit 12 SP3
openslp-devel-2.0.0-18.15.1
SUSE OpenStack Cloud 7
openslp-2.0.0-18.15.1
openslp-32bit-2.0.0-18.15.1
openslp-server-2.0.0-18.15.1

Ссылки

Описание

OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.

Затронутые продукты
SUSE Enterprise Storage 4:openslp-2.0.0-18.15.1
SUSE Enterprise Storage 4:openslp-32bit-2.0.0-18.15.1
SUSE Enterprise Storage 4:openslp-server-2.0.0-18.15.1
SUSE Linux Enterprise Desktop 12 SP3:openslp-2.0.0-18.15.1
Ссылки