CVE-2012-4428

HIGH

Openslp - Out-of-Bounds Read

Title source: rule
STIX 2.1

Description

openslp: SLPIntersectStringList()' Function has a DoS vulnerability

References (10)

Core 10
Core References
Third Party Advisory x_refsource_misc
https://security-tracker.debian.org/tracker/CVE-2012-4428
Issue Tracking, Third Party Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4428
Issue Tracking, Third Party Advisory x_refsource_misc
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-4428
Third Party Advisory x_refsource_misc
https://access.redhat.com/security/cve/cve-2012-4428
Third Party Advisory, VDB Entry x_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/78732
Mailing List, Third Party Advisory x_refsource_misc
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159059.html
Mailing List, Third Party Advisory x_refsource_misc
http://www.openwall.com/lists/oss-security/2012/09/13/27
Third Party Advisory, VDB Entry x_refsource_misc
http://www.securityfocus.com/bid/55540
Third Party Advisory x_refsource_misc
http://www.ubuntu.com/usn/USN-2730-1
Third Party Advisory x_refsource_misc
https://security.gentoo.org/glsa/201707-05

Scores

CVSS v3 7.5
EPSS 0.3332
EPSS Percentile 97.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-125
Status published
Products (5)
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 14.04
debian/debian_linux 8.0
fedoraproject/fedora 20
openslp/openslp 1.2.1
Published Dec 02, 2019
Tracked Since Feb 18, 2026