| Title | OpenSLP におけるバッファエラーの脆弱性 |
|---|---|
| Summary | OpenSLP には、バッファエラーの脆弱性が存在します。 |
| Possible impacts | 情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | Dec. 22, 2017, midnight |
| Registration Date | June 21, 2018, 2:37 p.m. |
| Last Update | June 21, 2018, 2:37 p.m. |
| CVSS3.0 : 緊急 | |
| Score | 9.8 |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CVSS2.0 : 危険 | |
| Score | 7.5 |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| Debian |
| Debian GNU/Linux |
| OpenSLP |
| OpenSLP 1.0.2 |
| OpenSLP 1.1.0 |
| No | Changed Details | Date of change |
|---|---|---|
| 1 | [2018年06月21日] 掲載 |
June 21, 2018, 2:37 p.m. |
| Summary | OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability. |
|---|---|
| Publication Date | April 24, 2018, 3:29 a.m. |
| Registration Date | Jan. 26, 2021, 1:19 p.m. |
| Last Update | Nov. 21, 2024, 12:18 p.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:a:openslp:openslp:1.0.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:openslp:openslp:1.1.0:*:*:*:*:*:*:* | |||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* | |||||
| Configuration3 | or higher | or less | more than | less than | |
| cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* | |||||
| cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* | |||||
| Configuration4 | or higher | or less | more than | less than | |
| cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* | |||||
| Configuration5 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_rd350g_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_rd350g:-:*:*:*:*:*:*:* | ||||
| Configuration6 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_rd350x_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_rd350x:-:*:*:*:*:*:*:* | ||||
| Configuration7 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_rd450x_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_rd450x:-:*:*:*:*:*:*:* | ||||
| Configuration8 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinksystem_hr630x_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinksystem_hr630x:-:*:*:*:*:*:*:* | ||||
| Configuration9 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinksystem_hr650x_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinksystem_hr650x:-:*:*:*:*:*:*:* | ||||
| Configuration10 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinksystem_sr630_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:* | ||||
| Configuration11 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:flex_system_fc3171_8gb_san_switch_firmware:*:*:*:*:*:*:*:* | 9.1.13.02.00 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:flex_system_fc3171_8gb_san_switch:-:*:*:*:*:*:*:* | ||||
| Configuration12 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:storage_n3310_firmware:*:*:*:*:*:*:*:* | 4.53.351 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:storage_n3310:-:*:*:*:*:*:*:* | ||||
| Configuration13 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:storage_n4610_firmware:*:*:*:*:*:*:*:* | 4.53.351 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:storage_n4610:-:*:*:*:*:*:*:* | ||||
| Configuration14 | or higher | or less | more than | less than | |
| cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:* | 1.4.0 | ||||
| cpe:2.3:a:lenovo:imm2:*:*:*:*:*:*:*:* | 4.70 | ||||
| cpe:2.3:a:lenovo:cmm:*:*:*:*:*:*:*:* | 1.8.0 | ||||
| cpe:2.3:a:lenovo:fan_power_controller:*:*:*:*:*:*:*:* | 30r-1.13 | ||||
| cpe:2.3:a:lenovo:imm1:*:*:*:*:*:*:*:* | 1.55 | ||||
| cpe:2.3:a:lenovo:bm_nextscale_fan_power_controller:*:*:*:*:*:*:*:* | 24p-2.15 | ||||
| Configuration15 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_rd340_firmware:*:*:*:*:*:*:*:* | 50.00 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_rd340:-:*:*:*:*:*:*:* | ||||
| Configuration16 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_rd350_firmware:*:*:*:*:*:*:*:* | 4.53.351 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_rd350:-:*:*:*:*:*:*:* | ||||
| Configuration17 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_rd440_firmware:*:*:*:*:*:*:*:* | 50.00 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_rd440:-:*:*:*:*:*:*:* | ||||
| Configuration18 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_rd450_firmware:*:*:*:*:*:*:*:* | 4.53.351 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_rd450:-:*:*:*:*:*:*:* | ||||
| Configuration19 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_rd550_firmware:*:*:*:*:*:*:*:* | 4.53.351 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_rd550:-:*:*:*:*:*:*:* | ||||
| Configuration20 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_rd540_firmware:*:*:*:*:*:*:*:* | 50.00 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_rd540:-:*:*:*:*:*:*:* | ||||
| Configuration21 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_rd640_firmware:*:*:*:*:*:*:*:* | 50.00 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_rd640:-:*:*:*:*:*:*:* | ||||
| Configuration22 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_rd650_firmware:*:*:*:*:*:*:*:* | 4.53.351 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_rd650:-:*:*:*:*:*:*:* | ||||
| Configuration23 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_rq750_firmware:*:*:*:*:*:*:*:* | 1.40 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_rq750:-:*:*:*:*:*:*:* | ||||
| Configuration24 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_rs160_firmware:*:*:*:*:*:*:*:* | 2.32 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_rs160:-:*:*:*:*:*:*:* | ||||
| Configuration25 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_sd350_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_sd350:-:*:*:*:*:*:*:* | ||||
| Configuration26 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_td340_firmware:*:*:*:*:*:*:*:* | 46.00 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_td340:-:*:*:*:*:*:*:* | ||||
| Configuration27 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_td350_firmware:*:*:*:*:*:*:*:* | 4.53.351 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_td350:-:*:*:*:*:*:*:* | ||||
| Configuration28 | or higher | or less | more than | less than | |
| cpe:2.3:o:lenovo:thinkserver_ts460_firmware:*:*:*:*:*:*:*:* | 2.32 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:lenovo:thinkserver_ts460:-:*:*:*:*:*:*:* | ||||