slpd-lite vulnerabilities

1 known vulnerability in slpd-lite from OpenBMC Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  slpd-lite: Buffer Copy without Checking Size of Input

  CVE-2024-41660Jul 31, 2024OpenBMC

  slpd-lite is a unicast SLP UDP server. Any OpenBMC system that includes the slpd-lite package is impacted. Installing this package is the default when building OpenBMC. Nefarious users can send slp packets to the BMC using UDP port 427 to cause memory overflow