[ GLSA 202005-12 ] OpenSLP

[GLSA]

Gentoo Linux Security Advisory

Title: OpenSLP: Multiple vulnerabilities (GLSA 202005-12)
Severity: normal
Exploitable: remote
Date: 2020-05-14
Bug(s): #662878
ID: 202005-12

Synopsis

Multiple vulnerabilities have been found in OpenSLP, the worst of
which could result in the arbitrary execution of code.


Background

OpenSLP is an open-source implementation of Service Location Protocol
(SLP).


Affected Packages

Package: net-misc/openslp
Vulnerable: <= 2.0.0-r5
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in OpenSLP. Please review
the CVE identifiers referenced below for details.


Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

Gentoo has discontinued support for OpenSLP. We recommend that users
unmerge OpenSLP:


References


CVE-2017-17833

CVE-2019-5544