{"id":"CVE-2018-12938","aliases":["EUVD-2018-4891","UBUNTU-CVE-2018-12938","USN-3708-1"],"status":"rejected","title":"openslp-dfsg vulnerabilities","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-17833.  Reason: This candidate is a duplicate of CVE-2017-17833.  Notes: All CVE users should reference CVE-2017-17833 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage","facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"published":"2018-06-28T00:00:00Z","modified":"2026-04-22T11:44:27Z","exploits":[{"source":"exploitdb","id":"EDB-44972","title":"OpenSLP 2.0.0 - Double-Free","type":"dos","platform":"linux","date":"2018-07-03","url":"https://www.exploit-db.com/exploits/44972"}],"fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"openslp-dfsg","fixed_in":["1.2.1-9ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openslp-dfsg","fixed_in":["1.2.1-11ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openslp-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-9ubuntu0.3"}]}],"versions":["1.2.1-9","1.2.1-9ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openslp-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-11ubuntu0.16.04.1"}]}],"versions":["1.2.1-10ubuntu1","1.2.1-11"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openslp-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-9ubuntu0.3"}]}],"versions":["1.2.1-9","1.2.1-9ubuntu0.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openslp-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-11ubuntu0.16.04.1"}]}],"versions":["1.2.1-10ubuntu1","1.2.1-11"],"bundled":2}],"references":[{"url":"https://ubuntu.com/security/CVE-2018-12938","tags":["report"]},{"url":"https://dumpco.re/blog/openslp-2.0.0-double-free","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3708-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12938","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17833","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-12938","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-17833.  Reason: This candidate is a duplicate of CVE-2017-17833.  Notes: All CVE users should reference CVE-2017-17833 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2018-06-28T23:00:00Z","modified":"2018-07-06T19:57:02Z","updated_at":"2026-11-02T14:35:06.679212Z"}],"euvd":[{"id":"EUVD-2018-4891","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-17833.  Reason: This candidate is a duplicate of CVE-2017-17833.  Notes: All CVE users should reference CVE-2017-17833 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2018-06-28T23:00:00Z","modified":"2018-07-06T19:57:02Z","updated_at":"2026-11-03T03:51:39.542012Z"}],"nvd":[{"id":"CVE-2018-12938","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-17833.  Reason: This candidate is a duplicate of CVE-2017-17833.  Notes: All CVE users should reference CVE-2017-17833 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2018-06-28T23:29:00.22Z","modified":"2023-11-07T02:52:24.24Z","updated_at":"2026-11-02T14:04:30.900603Z"}],"osv":[{"id":"UBUNTU-CVE-2018-12938","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-17833.  Reason: This candidate is a duplicate of CVE-2017-17833. Notes: All CVE users should reference CVE-2017-17833 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2018-06-28T00:00:00Z","modified":"2026-04-22T11:44:27.206853Z","updated_at":"2026-11-02T15:54:17.014176Z"},{"id":"USN-3708-1","title":"openslp-dfsg vulnerabilities","description":"It was discovered that OpenSLP incorrectly handled certain memory\noperations. A remote attacker could use this issue to cause OpenSLP to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode.\n","status":"published","published":"2018-07-09T16:55:05Z","modified":"2026-04-22T09:47:53.93283Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}