openslp: SLPIntersectStringList()' Function has a DoS vulnerability

Description

openslp: SLPIntersectStringList()' Function has a DoS vulnerability

Scores

EPSS (exploitation in 30 days)

10.1% · top 4.4% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• out-of-bounds read in SLPIntersectStringList() can cause DoS
• CWE-125 (opens in a new tab)

Affected products

• openslp-dfsg · openslp-dfsg

  • affected 1.2.1

References (10)

• https://security-tracker.debian.org/tracker/CVE-2012-4428 (opens in a new tab)x_refsource_MISCx_transferred
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4428 (opens in a new tab)x_refsource_MISCx_transferred
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-4428 (opens in a new tab)x_refsource_MISCx_transferred
• https://access.redhat.com/security/cve/cve-2012-4428 (opens in a new tab)x_refsource_MISCx_transferred
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78732 (opens in a new tab)x_refsource_MISCx_transferred
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159059.html (opens in a new tab)x_refsource_MISCx_transferred
• http://www.openwall.com/lists/oss-security/2012/09/13/27 (opens in a new tab)x_refsource_MISCx_transferred
• http://www.securityfocus.com/bid/55540 (opens in a new tab)x_refsource_MISCx_transferred
• http://www.ubuntu.com/usn/USN-2730-1 (opens in a new tab)x_refsource_MISCx_transferred
• https://security.gentoo.org/glsa/201707-05 (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Record last updated 6 Aug 2024, 20:35 UTC.