SUSE-SU-2016:2661-1: openslp&distro=SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2016:2661-1 is a vulnerability in openslp&distro=SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 27-10-2016PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for openslp This update for openslp fixes two security issues and two bugs. The following vulnerabilities were fixed: - CVE-2016-4912: A remote attacker could have crashed the server with a large number of packages (bsc#980722) - CVE-2016-7567: A remote attacker could cause a memory corruption having unspecified impact (bsc#1001600) The following bugfix changes are included: - bsc#994989: Removed convenience code as changes bytes in the message buffer breaking the verification code - bsc#974655: Removed no longer needed slpd init file
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse4 products
- openslp&distro=SUSE Linux Enterprise Desktop 12 SP1< 2.0.0-17.1
- openslp&distro=SUSE Linux Enterprise Server 12 SP1< 2.0.0-17.1
- openslp&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1< 2.0.0-17.1
- openslp&distro=SUSE Linux Enterprise Software Development Kit 12 SP1< 2.0.0-17.1
1 vendor · 4 products
References
7 links- bugzilla.suse.com/974655REPORT
- bugzilla.suse.com/980722REPORT
- bugzilla.suse.com/994989REPORT