9.8
CVE-2017-17833
- EPSS 3.89%
- Veröffentlicht 23.04.2018 18:29:00
- Zuletzt bearbeitet 21.11.2024 03:18:46
- Erkennungen
LoginOpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version 7.0
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Redhat ≫ Enterprise Linux Desktop Version 6.0
Redhat ≫ Enterprise Linux Desktop Version 7.0
Redhat ≫ Enterprise Linux Server Version 6.0
Redhat ≫ Enterprise Linux Server Version 7.0
Redhat ≫ Enterprise Linux Server Aus Version 7.6
Redhat ≫ Enterprise Linux Server Eus Version 7.5
Redhat ≫ Enterprise Linux Server Eus Version 7.6
Redhat ≫ Enterprise Linux Server Tus Version 7.6
Redhat ≫ Enterprise Linux Workstation Version 6.0
Redhat ≫ Enterprise Linux Workstation Version 7.0
Lenovo ≫ Thinkserver Rd350g Firmware Version -
Lenovo ≫ Thinkserver Rd350x Firmware Version -
Lenovo ≫ Thinkserver Rd450x Firmware Version -
Lenovo ≫ Thinksystem Hr630x Firmware Version -
Lenovo ≫ Thinksystem Hr650x Firmware Version -
Lenovo ≫ Thinksystem Sr630 Firmware Version -
Lenovo ≫ Flex System Fc3171 8gb San Switch Firmware Version < 9.1.13.02.00
Lenovo ≫ Storage N3310 Firmware Version < 4.53.351
Lenovo ≫ Storage N4610 Firmware Version < 4.53.351
Lenovo ≫ Bm Nextscale Fan Power Controller Version < 24p-2.15
Lenovo ≫ Fan Power Controller Version < 30r-1.13
Lenovo ≫ Xclarity Administrator Version < 1.4.0
Lenovo ≫ Thinkserver Rd340 Firmware Version < 50.00
Lenovo ≫ Thinkserver Rd350 Firmware Version < 4.53.351
Lenovo ≫ Thinkserver Rd440 Firmware Version <= 50.00
Lenovo ≫ Thinkserver Rd450 Firmware Version < 4.53.351
Lenovo ≫ Thinkserver Rd550 Firmware Version < 4.53.351
Lenovo ≫ Thinkserver Rd540 Firmware Version < 50.00
Lenovo ≫ Thinkserver Rd640 Firmware Version < 50.00
Lenovo ≫ Thinkserver Rd650 Firmware Version < 4.53.351
Lenovo ≫ Thinkserver Rq750 Firmware Version < 1.40
Lenovo ≫ Thinkserver Rs160 Firmware Version < 2.32
Lenovo ≫ Thinkserver Sd350 Firmware Version -
Lenovo ≫ Thinkserver Td340 Firmware Version < 46.00
Lenovo ≫ Thinkserver Td350 Firmware Version < 4.53.351
Lenovo ≫ Thinkserver Ts460 Firmware Version < 2.32
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.89% | 0.889 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
http://support.lenovo.com/us/en/solutions/LEN-18247
https://access.redhat.com/errata/RHSA-2018:2240
https://access.redhat.com/errata/RHSA-2018:2308
https://lists.debian.org/debian-lts-announce/2018/04/msg00029.html
https://security.gentoo.org/glsa/202005-12
https://sourceforge.net/p/openslp/mercurial/ci/151f07745901cbdba6e00e4889561b4083250da1/
https://usn.ubuntu.com/3708-1/