CVE-2017-17833: Buffer Overflow
Published Apr 23, 2018
·Updated
Last updated 25 August 2025
Other sources
OpenSLP releases have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.
Upstream patch:
https://sourceforge.net/p/openslp/mercurial/ci/151f07745901cbdba6e00e4889561b4083250da1/
— Red Hat
OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.
— Launchpad
Affected Software
114 affected components
debian/openslp-dfsg
OpenSLP OpenSLP=1.0.2
OpenSLP OpenSLP=1.1.0
Debian Debian Linux=7.0
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Desktop=7.0
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Server=7.0
redhat Enterprise Linux Server Aus=7.6
redhat Enterprise Linux Server Eus=7.5
redhat Enterprise Linux Server Eus=7.6
redhat Enterprise Linux Server Tus=7.6
redhat Enterprise Linux Workstation=6.0
redhat Enterprise Linux Workstation=7.0
Lenovo Thinkserver Rd350g Firmware
Lenovo Thinkserver Rd350g
Lenovo Thinkserver Rd350x Firmware
Lenovo Thinkserver Rd350x
Lenovo Thinkserver Rd450x Firmware
Lenovo Thinkserver Rd450x
Lenovo Thinksystem Hr630x Firmware
Lenovo Thinksystem Hr630x
Lenovo Thinksystem Hr650x Firmware
Lenovo Thinksystem Hr650x
Lenovo Thinksystem Sr630 Firmware
Lenovo Thinksystem Sr630
Lenovo Flex System Fc3171 8gb San Switch Firmware<9.1.13.02.00
Lenovo Flex System Fc3171 8gb San Switch
Lenovo Storage N3310 Firmware<4.53.351
Lenovo Storage N3310
Lenovo Storage N4610 Firmware<4.53.351
Lenovo Storage N4610
Lenovo Bm Nextscale Fan Power Controller<24p-2.15
Lenovo Cmm<1.8.0
Lenovo Fan Power Controller<30r-1.13
Lenovo Imm1<1.55
Lenovo Imm2<4.70
Lenovo XClarity Administrator<1.4.0
Lenovo Thinkserver Rd340 Firmware<50.00
Lenovo Thinkserver Rd340
Lenovo Thinkserver Rd350 Firmware<4.53.351
Lenovo ThinkServer RD350
Lenovo Thinkserver Rd440 Firmware<=50.00
Lenovo Thinkserver Rd440
Lenovo Thinkserver Rd450 Firmware<4.53.351
Lenovo Thinkserver Rd450
Lenovo Thinkserver Rd550 Firmware<4.53.351
Lenovo Thinkserver Rd550
Lenovo Thinkserver Rd540 Firmware<50.00
Lenovo Thinkserver Rd540
Lenovo Thinkserver Rd640 Firmware<50.00
Lenovo Thinkserver Rd640
Lenovo Thinkserver Rd650 Firmware<4.53.351
Lenovo Thinkserver Rd650
Lenovo Thinkserver Rq750 Firmware<1.40
Lenovo Thinkserver Rq750
Lenovo Thinkserver Rs160 Firmware<2.32
Lenovo Thinkserver Rs160
Lenovo Thinkserver Sd350 Firmware
Lenovo Thinkserver Sd350
Lenovo Thinkserver Td340 Firmware<46.00
Lenovo Thinkserver Td340
Lenovo Thinkserver Td350 Firmware<4.53.351
Lenovo Thinkserver Td350
Lenovo Thinkserver Ts460 Firmware<2.32
Lenovo Thinkserver Ts460
All of the following
Lenovo Thinkserver Rd350g Firmware
Lenovo Thinkserver Rd350g
All of the following
Lenovo Thinkserver Rd350x Firmware
Lenovo Thinkserver Rd350x
All of the following
Lenovo Thinkserver Rd450x Firmware
Lenovo Thinkserver Rd450x
All of the following
Lenovo Thinksystem Hr630x Firmware
Lenovo Thinksystem Hr630x
All of the following
Lenovo Thinksystem Hr650x Firmware
Lenovo Thinksystem Hr650x
All of the following
Lenovo Thinksystem Sr630 Firmware
Lenovo Thinksystem Sr630
All of the following
Lenovo Flex System Fc3171 8gb San Switch Firmware<9.1.13.02.00
Lenovo Flex System Fc3171 8gb San Switch
All of the following
Lenovo Storage N3310 Firmware<4.53.351
Lenovo Storage N3310
All of the following
Lenovo Storage N4610 Firmware<4.53.351
Lenovo Storage N4610
All of the following
Lenovo Thinkserver Rd340 Firmware<50.00
Lenovo Thinkserver Rd340
All of the following
Lenovo Thinkserver Rd350 Firmware<4.53.351
Lenovo ThinkServer RD350
All of the following
Lenovo Thinkserver Rd440 Firmware<=50.00
Lenovo Thinkserver Rd440
All of the following
Lenovo Thinkserver Rd450 Firmware<4.53.351
Lenovo Thinkserver Rd450
All of the following
Lenovo Thinkserver Rd550 Firmware<4.53.351
Lenovo Thinkserver Rd550
All of the following
Lenovo Thinkserver Rd540 Firmware<50.00
Lenovo Thinkserver Rd540
All of the following
Lenovo Thinkserver Rd640 Firmware<50.00
Lenovo Thinkserver Rd640
All of the following
Lenovo Thinkserver Rd650 Firmware<4.53.351
Lenovo Thinkserver Rd650
All of the following
Lenovo Thinkserver Rq750 Firmware<1.40
Lenovo Thinkserver Rq750
All of the following
Lenovo Thinkserver Rs160 Firmware<2.32
Lenovo Thinkserver Rs160
All of the following
Lenovo Thinkserver Sd350 Firmware
Lenovo Thinkserver Sd350
All of the following
Lenovo Thinkserver Td340 Firmware<46.00
Lenovo Thinkserver Td340
All of the following
Lenovo Thinkserver Td350 Firmware<4.53.351
Lenovo Thinkserver Td350
All of the following
Lenovo Thinkserver Ts460 Firmware<2.32
Lenovo Thinkserver Ts460
Remediation
Patch Available
Event History
Apr 23, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Apr 26, 2018
Data Sourced
via Red Hat·10:01 AM
DescriptionSeverityAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·10:34 PM
Description
Feb 19, 2026
Data Sourced
via Ubuntu·10:09 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-17833?
CVE-2017-17833 is classified as having a high severity due to its potential to cause remote code execution and denial of service.
2
How do I fix CVE-2017-17833?
To fix CVE-2017-17833, users should update to the patched versions of OpenSLP as provided by their respective distribution.
3
Which software is affected by CVE-2017-17833?
CVE-2017-17833 affects OpenSLP versions 1.0.2 and 1.1.0, and various Linux distributions including Debian and Red Hat.
4
Can CVE-2017-17833 result in data loss?
Yes, CVE-2017-17833 can potentially lead to data loss through remote code execution under certain conditions.
5
Is there any proof of concept available for CVE-2017-17833?
Yes, there are proof of concept exploits available demonstrating the vulnerability of CVE-2017-17833, highlighting its risks.