CVE-2016-7567
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 12%
from disclosure to weapon653 days
Published on NVDJan 23
1st PoC+653d
exploitation probability
12%top 4% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted string.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencewww.exploit-db.com/exploits/45804/unverifiedexploitdbwww.exploit-db.com/exploits/45804unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://security.gentoo.org/glsa/201707-05https://sourceforge.net/p/openslp/mercurial/ci/34fb3aa5e6b4997fa21cb614e480de36da5dbc9a/https://www.exploit-db.com/exploits/45804/http://www.openwall.com/lists/oss-security/2016/09/27/4http://www.openwall.com/lists/oss-security/2016/09/28/1http://www.securityfocus.com/bid/93186