VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

概要

参考情報

• openwall.com/lists/oss-security/2019/12/10/2 · Mailing List
• openwall.com/lists/oss-security/2019/12/11/2 · Mailing List
• vmware.com/security/advisories/VMSA-2019-0022.html · Patch
• access.redhat.com/errata/RHSA-2019:4240 · Third Party Advisory
• access.redhat.com/errata/RHSA-2020:0199 · Third Party Advisory
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA3LYAJ2NRKMOZLZOQNDJ5TNQRFMWGHF · Release Notes
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPXXJZLPLAQULBCJVI5NNWZ3PGWXGXWG · Release Notes
• security.gentoo.org/glsa/202005-12 · Third Party Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2019-5544

openslp のその他の脆弱性

• CVE-2012-4428高 7.5openslp: SLPIntersectStringList()' Function has a DoS vulnerability
• CVE-2017-17833緊急 9.8OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-se…
• CVE-2015-5177高 7.5Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial o…
• CVE-2016-4912高 7.5The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and…
• CVE-2016-7567緊急 9.8Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact …