{"id":"CVE-2016-7567","aliases":["AZL-36967","AZL-7320","EUVD-2016-8420","GHSA-q4qm-j969-4v59","MGASA-2016-0348","SUSE-SU-2016:2661-1","SUSE-SU-2018:0100-1","openSUSE-SU-2024:10065-1"],"status":"published","title":"Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows...","description":"Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.12364,"percentile":0.96228,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-119"],"published":"2016-10-20T22:35:16Z","modified":"2026-11-05T05:36:30Z","exploits":[{"source":"exploitdb","id":"EDB-45804","title":"OpenSLP 2.0.0 - Multiple Vulnerabilities","type":"local","platform":"linux","date":"2018-11-07","url":"https://www.exploit-db.com/exploits/45804"}],"fixes":[{"ecosystem":"Azure Linux:3","package":"openslp","fixed_in":["2.0.0-26"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"openslp","fixed_in":["2.0.0-26"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"openslp","fixed_in":["2.0.0-5.2.mga5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"openslp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-26"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"openslp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-26"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"openslp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-5.2.mga5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"openslp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"openslp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"openslp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"openslp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"openslp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-18.2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"openslp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-18.2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"openslp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-18.2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"openslp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-18.2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"openslp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-18.2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openslp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-8.1"}]}],"bundled":3}],"products":[{"vendor":"openslp","product":"openslp"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/09/27/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93186","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/28/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201707-05","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/45804/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://sourceforge.net/p/openslp/mercurial/ci/34fb3aa5e6b4997fa21cb614e480de36da5dbc9a/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7567","tags":["web"]},{"url":"https://sourceforge.net/p/openslp/mercurial/ci/34fb3aa5e6b4997fa21cb614e480de36da5dbc9a"},{"url":"https://www.exploit-db.com/exploits/45804"},{"url":"https://github.com/advisories/GHSA-q4qm-j969-4v59"},{"url":"https://advisories.mageia.org/MGASA-2016-0348.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19479","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2016/09/27/4","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162661-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1001600","tags":["report"]},{"url":"https://bugzilla.suse.com/974655","tags":["report"]},{"url":"https://bugzilla.suse.com/980722","tags":["report"]},{"url":"https://bugzilla.suse.com/994989","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7567","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180100-1/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3609","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-7567","description":"Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string.","status":"published","published":"2017-01-23T21:00:00Z","modified":"2024-08-06T02:04:54.943Z","updated_at":"2026-11-02T14:33:36.483151Z"}],"euvd":[{"id":"EUVD-2016-8420","description":"Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string.","status":"published","published":"2017-01-23T21:00:00Z","modified":"2024-08-06T02:04:54Z","updated_at":"2026-11-03T02:22:32.403524Z"}],"ghsa":[{"id":"GHSA-q4qm-j969-4v59","title":"Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows...","description":"Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string.","status":"published","published":"2022-05-13T01:27:09Z","modified":"2025-04-20T03:32:32Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:39.626411Z"}],"nvd":[{"id":"CVE-2016-7567","description":"Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string.","status":"published","published":"2017-01-23T21:59:02.58Z","modified":"2026-06-17T00:53:15.357Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:35.029632Z"}],"osv":[{"id":"AZL-36967","title":"CVE-2016-7567 affecting package openslp for versions less than 2.0.0-26","description":"Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string.","status":"published","published":"2017-01-23T21:59:02Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:19.554273Z"},{"id":"AZL-7320","title":"CVE-2016-7567 affecting package openslp for versions less than 2.0.0-26","description":"Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string.","status":"published","published":"2017-01-23T21:59:02Z","modified":"2026-04-21T04:33:50.64933Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:09.201912Z"},{"id":"MGASA-2016-0348","title":"Updated openslp packages fix security vulnerability","description":"A memory corruption bug was present in openslp due to lack of bounds \nchecking in SLPFoldWhiteSpace() (CVE-2016-7567).\n","status":"published","published":"2016-10-20T22:35:16Z","modified":"2026-04-16T06:25:38.34557845Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10065-1","title":"openslp-2.0.0-8.1 on GA media","description":"These are all security issues fixed in the openslp-2.0.0-8.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:22:27.872486Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2016:2661-1","title":"Security update for openslp","description":"This update for openslp fixes two security issues and two bugs.\n\nThe following vulnerabilities were fixed:\n- CVE-2016-4912: A remote attacker could have crashed the server with a large number of packages (bsc#980722)\n- CVE-2016-7567: A remote attacker could cause a memory corruption having unspecified impact (bsc#1001600)\n\nThe following bugfix changes are included:\n- bsc#994989: Removed convenience code as changes bytes in the message buffer breaking the verification code\n- bsc#974655: Removed no longer needed slpd init file\n","status":"published","published":"2016-10-27T11:06:53Z","modified":"2026-02-04T04:19:48.955678Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2018:0100-1","title":"Security update for openslp","description":"This update for openslp fixes two security issues and two bugs.\n\nThe following vulnerabilities were fixed:\n\n- CVE-2016-4912: A remote attacker could have crashed the server with a large\n  number of packages (bsc#980722)\n- CVE-2016-7567: A remote attacker could cause a memory corruption having\n  unspecified impact (bsc#1001600)\n\nThe following bugfix changes are included:\n\n- bsc#994989: Removed convenience code as changes bytes in the message buffer\n  breaking the verification code\n- bsc#974655: Removed no longer needed slpd init file\n","status":"published","published":"2018-01-15T10:30:50Z","modified":"2026-02-04T04:20:59.882797Z","updated_at":"2026-11-02T15:53:44.594517Z"}]}}