CVE-2015-5177: Double Free
A double free flaw was found in openslp's SLPDProcessMessage() function. A crafted package could cause openslp to crash.
This flaw only affects version 1.2.1 of openslp, which is only shipped in EPEL 5. Version 2.0.0 is not affected.
OpenSLP is not actively maintained upstream so patches are not available.
Acknowledgements:
Red Hat would like to thank Qinghao Tang of QIHU 360 for reporting this issue.
Other sources
Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpdknownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5177?
CVE-2015-5177 is classified as a high severity vulnerability due to its potential to crash the openslp service.
Which versions of OpenSLP are affected by CVE-2015-5177?
CVE-2015-5177 specifically affects OpenSLP version 1.2.1, which is shipped only in EPEL 5.
How do I fix CVE-2015-5177?
To mitigate CVE-2015-5177, upgrade your OpenSLP installation to version 2.0.0 or higher, as it is not affected by this vulnerability.
Where can I find more information about CVE-2015-5177?
For detailed information regarding CVE-2015-5177, refer to security advisories and resources provided by your operating system's maintainers.
Is CVE-2015-5177 still exploitable in current systems?
CVE-2015-5177 is not exploitable in systems using OpenSLP version 2.0.0 or later, as these versions are unaffected.