CVE-2012-4428

high-risk

Published 2019-12-02

openslp: SLPIntersectStringList()' Function has a DoS vulnerability

Do I need to act?

33.3% chance of exploitation in next 30 days

EPSS score — higher than 67% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

NETWORK / LOW complexity

Openslp

Debian Linux

Fedora

Ubuntu Linux

Debian Openslp Canonical Fedoraproject

Mailing List http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159059.html

Mailing List http://www.openwall.com/lists/oss-security/2012/09/13/27

Third Party Advisory http://www.securityfocus.com/bid/55540

Third Party Advisory http://www.ubuntu.com/usn/USN-2730-1

Third Party Advisory https://access.redhat.com/security/cve/cve-2012-4428

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4428

Issue Tracking https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-4428

Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/78732

Third Party Advisory https://security-tracker.debian.org/tracker/CVE-2012-4428

Third Party Advisory https://security.gentoo.org/glsa/201707-05