CVE-2016-4912 — NULL Pointer Dereference in Openslp

CWE-476 — NULL Pointer Dereference7 documents5 sources
Severity
7.5HIGHNVD
EPSS
0.8%
top 26.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
OpenslpMsrc Cbl2 Openslp 2.0.0-26 ON CBL Mariner 2.0
Timeline
PublishedMar 27
Latest updateMay 17

Description

The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a large number of crafted packets, which triggers a memory allocation failure.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDopenslp/openslp2.0.0

🔴Vulnerability Details

1
GHSA
GHSA-m4qh-6ff4-g5xx: The _xrealloc function in xlsp_xmalloc↗2022-05-17
▶

📋Vendor Advisories

2
Microsoft
The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service↗2017-03-14
▶
Red Hat
openslp: null pointer dereference in _xrealloc() function↗2016-05-18
▶

💬Community

3
Bugzilla
CVE-2016-4912 openslp: null pointer dereference in _xrealloc() function [epel-5]↗2016-05-19
▶
Bugzilla
CVE-2016-4912 openslp: null pointer dereference in _xrealloc() function [fedora-all]↗2016-05-19
▶
Bugzilla
CVE-2016-4912 openslp: null pointer dereference in _xrealloc() function↗2016-04-21
▶