CVE-2017-17833

OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.

Published : 2018-04-23 18:29 Updated : 2019-04-22 14:08

7.5

CVSS Score More info

Score 7.5 / 10

Access vector NETWORK

A vulnerability exploitable with network access means the vulnerable software is bound to the network stack and the attacker does not require local network access or local access. Such a vulnerability is often termed "remotely exploitable". An example of a network attack is an RPC buffer overflow.

Access complexity LOW

Specialized access conditions or extenuating circumstances do not exist. The following are examples:

The affected product typically requires access to a wide range of systems and users, possibly anonymous and untrusted (e.g., Internet-facing web or mail server).
The affected configuration is default or ubiquitous.
The attack can be performed manually and requires little skill or additional information gathering.
The race condition is a lazy one (i.e., it is technically a race but easily winnable).

Authentication NONE

Authentication is not required to exploit the vulnerability.

Confidentiality impact PARTIAL

There is considerable informational disclosure. Access to some system files is possible, but the attacker does not have control over what is obtained, or the scope of the loss is constrained. An example is a vulnerability that divulges only certain tables in a database.

Integrity impact PARTIAL

Modification of some system files or information is possible, but the attacker does not have control over what can be modified, or the scope of what the attacker can affect is limited. For example, system or application files may be overwritten or modified, but either the attacker has no control over which files are affected or the attacker can modify files within only a limited context or scope.

Availability impact PARTIAL

There is reduced performance or interruptions in resource availability. An example is a network-based flood attack that permits a limited number of successful connections to an Internet service.

CPE (37)
Tree view

Vendor	Product	Version	URI
Openslp	Openslp	1.0.2	cpe:/a:openslp:openslp:1.0.2
Openslp	Openslp	1.1.0	cpe:/a:openslp:openslp:1.1.0
Debian	Debian Linux	7.0	cpe:/o:debian:debian_linux:7.0
Lenovo	Xclarity Administrator	1.0.1	cpe:/a:lenovo:xclarity_administrator:1.0.1
Lenovo	Xclarity Administrator	1.0.3	cpe:/a:lenovo:xclarity_administrator:1.0.3
Lenovo	Xclarity Administrator	1.1.0	cpe:/a:lenovo:xclarity_administrator:1.1.0
Lenovo	Xclarity Administrator	1.1.1	cpe:/a:lenovo:xclarity_administrator:1.1.1
Lenovo	Xclarity Administrator	1.2.1	cpe:/a:lenovo:xclarity_administrator:1.2.1
Lenovo	Xclarity Administrator	1.2.2	cpe:/a:lenovo:xclarity_administrator:1.2.2
Lenovo	Xclarity Administrator	1.3.0	cpe:/a:lenovo:xclarity_administrator:1.3.0
Lenovo	Xclarity Administrator	1.3.1	cpe:/a:lenovo:xclarity_administrator:1.3.1
Lenovo	Xclarity Administrator	1.3.2	cpe:/a:lenovo:xclarity_administrator:1.3.2
Canonical	Ubuntu Linux	14.04	cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~
Canonical	Ubuntu Linux	16.04	cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~
Lenovo	Thinkserver Rd350 Firmware	1.25.0	cpe:/o:lenovo:thinkserver_rd350_firmware:1.25.0
Lenovo	Thinkserver Rd350g Firmware	-	cpe:/o:lenovo:thinkserver_rd350g_firmware:-
Lenovo	Thinkserver Rd350x Firmware	-	cpe:/o:lenovo:thinkserver_rd350x_firmware:-
Lenovo	Thinkserver Rd440 Firmware	50.00	cpe:/o:lenovo:thinkserver_rd440_firmware:50.00
Lenovo	Thinkserver Rd450 Firmware	1.25.0	cpe:/o:lenovo:thinkserver_rd450_firmware:1.25.0
Lenovo	Thinkserver Rd450x Firmware	-	cpe:/o:lenovo:thinkserver_rd450x_firmware:-
Lenovo	Thinkserver Rd550 Firmware	1.25.0	cpe:/o:lenovo:thinkserver_rd550_firmware:1.25.0
Lenovo	Thinkserver Rd650 Firmware	1.25.0	cpe:/o:lenovo:thinkserver_rd650_firmware:1.25.0
Lenovo	Thinkserver Sd350 Firmware	-	cpe:/o:lenovo:thinkserver_sd350_firmware:-
Lenovo	Thinkserver Td350 Firmware	1.25.0	cpe:/o:lenovo:thinkserver_td350_firmware:1.25.0
Lenovo	Thinksystem Hr630x Firmware	-	cpe:/o:lenovo:thinksystem_hr630x_firmware:-
Lenovo	Thinksystem Hr650x Firmware	-	cpe:/o:lenovo:thinksystem_hr650x_firmware:-
Lenovo	Thinksystem Sr630 Firmware	-	cpe:/o:lenovo:thinksystem_sr630_firmware:-
Redhat	Enterprise Linux Desktop	6.0	cpe:/o:redhat:enterprise_linux_desktop:6.0
Redhat	Enterprise Linux Desktop	7.0	cpe:/o:redhat:enterprise_linux_desktop:7.0
Redhat	Enterprise Linux Server	6.0	cpe:/o:redhat:enterprise_linux_server:6.0
Redhat	Enterprise Linux Server	7.0	cpe:/o:redhat:enterprise_linux_server:7.0
Redhat	Enterprise Linux Server Aus	7.6	cpe:/o:redhat:enterprise_linux_server_aus:7.6
Redhat	Enterprise Linux Server Eus	7.5	cpe:/o:redhat:enterprise_linux_server_eus:7.5
Redhat	Enterprise Linux Server Eus	7.6	cpe:/o:redhat:enterprise_linux_server_eus:7.6
Redhat	Enterprise Linux Server Tus	7.6	cpe:/o:redhat:enterprise_linux_server_tus:7.6
Redhat	Enterprise Linux Workstation	6.0	cpe:/o:redhat:enterprise_linux_workstation:6.0
Redhat	Enterprise Linux Workstation	7.0	cpe:/o:redhat:enterprise_linux_workstation:7.0

Redhat (6) Search CVE
1. Enterprise Linux Server Eus (2) Search CVE
  1. 7.5
  2. 7.6
2. Enterprise Linux Desktop (2) Search CVE
  1. 6.0
  2. 7.0
3. Enterprise Linux Workstation (2) Search CVE
  1. 6.0
  2. 7.0
4. Enterprise Linux Server (2) Search CVE
  1. 6.0
  2. 7.0
5. Enterprise Linux Server Aus (1) Search CVE
  1. 7.6
6. Enterprise Linux Server Tus (1) Search CVE
  1. 7.6
Canonical (1) Search CVE
1. Ubuntu Linux (2) Search CVE
  1. 14.04
  2. 16.04
Openslp (1) Search CVE
1. Openslp (2) Search CVE
  1. 1.0.2
  2. 1.1.0
Lenovo (14) Search CVE
1. Thinkserver Rd440 Firmware (1) Search CVE
  1. 50.00
2. Thinkserver Rd350 Firmware (1) Search CVE
  1. 1.25.0
3. Thinksystem Sr630 Firmware (1) Search CVE
  1. -
4. Thinkserver Rd350g Firmware (1) Search CVE
  1. -
5. Thinkserver Rd450x Firmware (1) Search CVE
  1. -
6. Thinkserver Rd350x Firmware (1) Search CVE
  1. -
7. Thinkserver Rd450 Firmware (1) Search CVE
  1. 1.25.0
8. Thinkserver Rd550 Firmware (1) Search CVE
  1. 1.25.0
9. Thinkserver Td350 Firmware (1) Search CVE
  1. 1.25.0
10. Thinksystem Hr650x Firmware (1) Search CVE
  1. -
11. Thinkserver Sd350 Firmware (1) Search CVE
  1. -
12. Xclarity Administrator (9) Search CVE
  1. 1.0.1
  2. 1.0.3
  3. 1.1.0
  4. 1.1.1
  5. 1.2.1
  6. 1.2.2
  7. 1.3.0
  8. 1.3.1
  9. 1.3.2
13. Thinkserver Rd650 Firmware (1) Search CVE
  1. 1.25.0
14. Thinksystem Hr630x Firmware (1) Search CVE
  1. -
Debian (1) Search CVE
1. Debian Linux (1) Search CVE
  1. 7.0

CWE

ID	Name	Description	Links
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.		CVE

References

Source	Link
CONFIRM	https://sourceforge.net/p/openslp/mercurial/ci/151f07745901cbdba6e00e4889561b4083250da1/
CONFIRM	http://support.lenovo.com/us/en/solutions/LEN-18247
MLIST	https://lists.debian.org/debian-lts-announce/2018/04/msg00029.html
UBUNTU	https://usn.ubuntu.com/3708-1/
REDHAT	https://access.redhat.com/errata/RHSA-2018:2240
REDHAT	https://access.redhat.com/errata/RHSA-2018:2308

History of changes

Date

Event

2019-04-22 14:08

References changed

3 changed

https://usn.ubuntu.com/3708-1/	UNKNOWN->VENDOR_ADVISORY
https://access.redhat.com/errata/RHSA-2018:2240	UNKNOWN->VENDOR_ADVISORY
https://access.redhat.com/errata/RHSA-2018:2308	UNKNOWN->VENDOR_ADVISORY

CPEs changed

34 added

cpe:/a:lenovo:xclarity_administrator:1.0.1 (Lenovo / Xclarity Administrator)
cpe:/a:lenovo:xclarity_administrator:1.0.3 (Lenovo / Xclarity Administrator)
cpe:/a:lenovo:xclarity_administrator:1.1.0 (Lenovo / Xclarity Administrator)
cpe:/a:lenovo:xclarity_administrator:1.1.1 (Lenovo / Xclarity Administrator)
cpe:/a:lenovo:xclarity_administrator:1.2.1 (Lenovo / Xclarity Administrator)
cpe:/a:lenovo:xclarity_administrator:1.2.2 (Lenovo / Xclarity Administrator)
cpe:/a:lenovo:xclarity_administrator:1.3.0 (Lenovo / Xclarity Administrator)
cpe:/a:lenovo:xclarity_administrator:1.3.1 (Lenovo / Xclarity Administrator)
cpe:/a:lenovo:xclarity_administrator:1.3.2 (Lenovo / Xclarity Administrator)
cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~ (Canonical / Ubuntu Linux)
cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ (Canonical / Ubuntu Linux)
cpe:/o:lenovo:thinkserver_rd350_firmware:1.25.0 (Lenovo / Thinkserver Rd350 Firmware)
cpe:/o:lenovo:thinkserver_rd350g_firmware:- (Lenovo / Thinkserver Rd350g Firmware)
cpe:/o:lenovo:thinkserver_rd350x_firmware:- (Lenovo / Thinkserver Rd350x Firmware)
cpe:/o:lenovo:thinkserver_rd440_firmware:50.00 (Lenovo / Thinkserver Rd440 Firmware)
cpe:/o:lenovo:thinkserver_rd450_firmware:1.25.0 (Lenovo / Thinkserver Rd450 Firmware)
cpe:/o:lenovo:thinkserver_rd450x_firmware:- (Lenovo / Thinkserver Rd450x Firmware)
cpe:/o:lenovo:thinkserver_rd550_firmware:1.25.0 (Lenovo / Thinkserver Rd550 Firmware)
cpe:/o:lenovo:thinkserver_rd650_firmware:1.25.0 (Lenovo / Thinkserver Rd650 Firmware)
cpe:/o:lenovo:thinkserver_sd350_firmware:- (Lenovo / Thinkserver Sd350 Firmware)
cpe:/o:lenovo:thinkserver_td350_firmware:1.25.0 (Lenovo / Thinkserver Td350 Firmware)
cpe:/o:lenovo:thinksystem_hr630x_firmware:- (Lenovo / Thinksystem Hr630x Firmware)
cpe:/o:lenovo:thinksystem_hr650x_firmware:- (Lenovo / Thinksystem Hr650x Firmware)
cpe:/o:lenovo:thinksystem_sr630_firmware:- (Lenovo / Thinksystem Sr630 Firmware)
cpe:/o:redhat:enterprise_linux_desktop:6.0 (Redhat / Enterprise Linux Desktop)
cpe:/o:redhat:enterprise_linux_desktop:7.0 (Redhat / Enterprise Linux Desktop)
cpe:/o:redhat:enterprise_linux_server:6.0 (Redhat / Enterprise Linux Server)
cpe:/o:redhat:enterprise_linux_server:7.0 (Redhat / Enterprise Linux Server)
cpe:/o:redhat:enterprise_linux_server_aus:7.6 (Redhat / Enterprise Linux Server Aus)
cpe:/o:redhat:enterprise_linux_server_eus:7.5 (Redhat / Enterprise Linux Server Eus)
cpe:/o:redhat:enterprise_linux_server_eus:7.6 (Redhat / Enterprise Linux Server Eus)
cpe:/o:redhat:enterprise_linux_server_tus:7.6 (Redhat / Enterprise Linux Server Tus)
cpe:/o:redhat:enterprise_linux_workstation:6.0 (Redhat / Enterprise Linux Workstation)
cpe:/o:redhat:enterprise_linux_workstation:7.0 (Redhat / Enterprise Linux Workstation)

2018-08-02 01:29

References changed

1 added

REDHAT

https://access.redhat.com/errata/RHSA-2018:2308

2018-07-25 01:29

References changed

1 added

REDHAT

https://access.redhat.com/errata/RHSA-2018:2240

2018-07-11 01:29

References changed

1 added

UBUNTU

https://usn.ubuntu.com/3708-1/

2018-05-25 16:21

CPEs changed

3 added

cpe:/a:openslp:openslp:1.0.2 (Openslp / Openslp)
cpe:/a:openslp:openslp:1.1.0 (Openslp / Openslp)
cpe:/o:debian:debian_linux:7.0 (Debian / Debian Linux)

CVSS changed

New score : 7.5
No old score

CWEs changed

Added : CWE-119

References changed

3 changed

https://lists.debian.org/debian-lts-announce/2018/04/msg00029.html	UNKNOWN->VENDOR_ADVISORY
https://sourceforge.net/p/openslp/mercurial/ci/151f07745901cbdba6e00e4889561b4083250da1/	UNKNOWN->VENDOR_ADVISORY
http://support.lenovo.com/us/en/solutions/LEN-18247	UNKNOWN->VENDOR_ADVISORY

2018-04-27 01:29

References changed

1 added

MLIST

https://lists.debian.org/debian-lts-announce/2018/04/msg00029.html

2018-04-23 18:29

CVE-2017-17833

Score 7.5 / 10

CWE

References

History of changes

New CVE