CVE catalog

CVE-2016-4912

openslp-2.0.0-8.1 on GA media

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
5.36% · Oct 25, 2026

This update for openslp fixes two security issues and two bugs. The following vulnerabilities were fixed: - CVE-2016-4912: A remote attacker could have crashed the server with a large number of packages (bsc#980722) - CVE-2016-7567: A remote attacker could cause a memory corruption having unspecified impact (bsc#1001600) The following bugfix changes are included: - bsc#994989: Removed convenience code as changes bytes in the message buffer breaking the verification code - bsc#974655: Removed no longer needed slpd init file

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Suseopenslplinux enterprise desktop 12 sp22.0.0-18.2.1fixed
Suseopenslplinux enterprise server for raspberry pi 12 sp22.0.0-18.2.1fixed
Suseopenslplinux enterprise software development kit 12 sp22.0.0-18.2.1fixed
Suseopenslplinux enterprise server 12 sp22.0.0-18.2.1fixed
Suseopenslplinux enterprise server for sap applications 12 sp22.0.0-18.2.1fixed
Suseopenslplinux enterprise desktop 12 sp12.0.0-17.1fixed
Suseopenslplinux enterprise software development kit 12 sp12.0.0-17.1fixed
Suseopenslplinux enterprise server 12 sp12.0.0-17.1fixed
Suseopenslplinux enterprise server for sap applications 12 sp12.0.0-17.1fixed
Opensuseopenslptumbleweed2.0.0-8.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Suseopenslprpmlinux enterprise desktop 12 sp22.0.0-18.2.1Not reportedSUSE-SU-2018:0100-1Not reported
Suseopenslprpmlinux enterprise server for raspberry pi 12 sp22.0.0-18.2.1Not reportedSUSE-SU-2018:0100-1Not reported
Suseopenslprpmlinux enterprise software development kit 12 sp22.0.0-18.2.1Not reportedSUSE-SU-2018:0100-1Not reported
Suseopenslprpmlinux enterprise server 12 sp22.0.0-18.2.1Not reportedSUSE-SU-2018:0100-1Not reported
Suseopenslprpmlinux enterprise server for sap applications 12 sp22.0.0-18.2.1Not reportedSUSE-SU-2018:0100-1Not reported
Suseopenslprpmlinux enterprise desktop 12 sp12.0.0-17.1Not reportedSUSE-SU-2016:2661-1Not reported
Suseopenslprpmlinux enterprise software development kit 12 sp12.0.0-17.1Not reportedSUSE-SU-2016:2661-1Not reported
Suseopenslprpmlinux enterprise server 12 sp12.0.0-17.1Not reportedSUSE-SU-2016:2661-1Not reported
Suseopenslprpmlinux enterprise server for sap applications 12 sp12.0.0-17.1Not reportedSUSE-SU-2016:2661-1Not reported
Opensuseopenslprpmtumbleweed2.0.0-8.1Not reportedOPENSUSE-SU-2024:10065-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [libslp1]Unknown

    Source package: [openslp]

    Details (1)

    • 2.0.0-22.8 · x86_64 · tumbleweed

      Unknown · Fixed: 2.0.0-8.1

      Version impact unknown

      pypi · openslp · opensuse · tumbleweed

  • [openslp-devel]Unknown

    Source package: [openslp]

    Details (1)

    • 2.0.0-22.8 · x86_64 · tumbleweed

      Unknown · Fixed: 2.0.0-8.1

      Version impact unknown

      pypi · openslp · opensuse · tumbleweed

  • [openslp-server]Unknown

    Source package: [openslp]

    Details (1)

    • 2.0.0-22.8 · x86_64 · tumbleweed

      Unknown · Fixed: 2.0.0-8.1

      Version impact unknown

      pypi · openslp · opensuse · tumbleweed

  • [openslp]Fixed

    Source package: [openslp]

    Details (1)

    • 2.0.0-22.8 · x86_64 · tumbleweed

      Fixed · Fixed: 2.0.0-8.1

      pypi · openslp · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]