[{"CVE":"CVE-2019-5544","severity":"critical","public_date":"2019-12-06T00:00:00Z","advisories":["RHSA-2020:0199","RHSA-2019:4240"],"bugzilla":"1777788","bugzilla_description":"CVE-2019-5544 openslp: Heap-based buffer overflow in ProcessSrvRqst() in slpd_process.c leading to remote code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["openslp-1:2.0.0-4.el6_10","openslp-1:2.0.0-8.el7_7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-5544.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"9.8"},{"CVE":"CVE-2018-12938","severity":null,"public_date":"2018-06-28T00:00:00Z","advisories":[],"bugzilla":"1596450","bugzilla_description":"CVE-2018-12938 openslp: Double free in slp_buffer:SLPBufferRealloc() may allow a remote attacker to execute arbitrary code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-12938.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2017-17833","severity":"important","public_date":"2018-04-19T00:00:00Z","advisories":["RHSA-2018:2240","RHSA-2018:2308"],"bugzilla":"1572166","bugzilla_description":"CVE-2017-17833 openslp: Heap memory corruption in slpd/slpd_process.c allows denial of service or potentially code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["openslp-1:2.0.0-3.el6","openslp-1:2.0.0-7.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17833.json","cvss3_scoring_vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2016-7567","severity":"low","public_date":"2016-09-27T00:00:00Z","advisories":[],"bugzilla":"1379987","bugzilla_description":"CVE-2016-7567 openslp: memory corruption due to possible overflow in SLPFoldWhiteSpace in common/slp_compare.c","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7567.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-4912","severity":"moderate","public_date":"2016-05-18T00:00:00Z","advisories":[],"bugzilla":"1329295","bugzilla_description":"CVE-2016-4912 openslp: null pointer dereference in _xrealloc() function","cvss_score":5.4,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4912.json"},{"CVE":"CVE-2015-5155","severity":null,"public_date":"2015-09-16T00:00:00Z","advisories":[],"bugzilla":"1263769","bugzilla_description":"CVE-2015-5155 openslp: Packet with crafted \"nextoffset\" and \"extid\" values causes DoS","cvss_score":3.3,"cvss_scoring_vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5155.json"},{"CVE":"CVE-2015-5177","severity":"moderate","public_date":"2015-08-06T00:00:00Z","advisories":[],"bugzilla":"1251064","bugzilla_description":"CVE-2015-5177 openslp: double free in SLPDProcessMessage()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-416","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5177.json"},{"CVE":"CVE-2012-4428","severity":"moderate","public_date":"2012-09-13T00:00:00Z","advisories":[],"bugzilla":"857242","bugzilla_description":"CVE-2012-4428 openslp: out-of-bounds read in SLPIntersectStringList() can cause DoS","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4428.json"}]