Approved changes feed: RSS · Atom

cpe:2.3:a:openslp:openslp:1.2.1:*:*:*:*:*:*:*

part: a version: 1.2.1 update: *

VendorOpenslp (7e976dad-2303-53f6-ae53-47494dd0ab08)
ProductOpenslp (fda39113-b27f-5603-b685-3e4707477e74)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:cpan/crypt::net::slp purl2cpe 2026-06-01 10:10:57.332293
pkg:gem/rslp purl2cpe 2026-06-01 10:10:57.332295
pkg:github/openslp-org/openslp purl2cpe 2026-06-01 10:10:57.332296
pkg:npm/slp purl2cpe 2026-06-01 10:10:57.332297
pkg:pypi/pyslp purl2cpe 2026-06-01 10:10:57.332299
pkg:rpm/fedora/openslp purl2cpe 2026-06-01 10:10:57.332300
pkg:rpm/opensuse/openslp purl2cpe 2026-06-01 10:10:57.332301
pkg:rpm/opensuse/openslp-32bit purl2cpe 2026-06-01 10:10:57.332303
pkg:rpm/opensuse/openslp-64bit purl2cpe 2026-06-01 10:10:57.332304
pkg:rpm/opensuse/openslp-x86 purl2cpe 2026-06-01 10:10:57.332305
pkg:sourceforge/openslp purl2cpe 2026-06-01 10:10:57.332307

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5177 vulnerable 2026-06-08 05:06:49.140210 Details available
Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.
Published: 2017-10-20T21:00:00.000Z
Updated: 2024-08-06T06:41:07.982Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4428 vulnerable 2026-06-08 05:02:17.437612 Details available
openslp: SLPIntersectStringList()' Function has a DoS vulnerability
Published: 2019-12-02T17:41:11.000Z
Updated: 2024-08-06T20:35:09.519Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3609 vulnerable 2026-06-08 04:55:15.771470 Details available
The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SLPD) in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service (infinite loop) via a packet with a "next extension offset" that references this extension or a previous extension. NOTE: some of these details are obtained from third party information.
Published: 2011-03-11T17:00:00.000Z
Updated: 2024-08-07T03:18:53.051Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0769 vulnerable 2026-06-08 04:48:13.630452 Details available
Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets.
Published: 2005-03-18T05:00:00.000Z
Updated: 2024-08-07T21:28:28.311Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.