Critical severity9.8NVD Advisory· Published Apr 23, 2018· Updated Jun 17, 2026

CVE-2017-17833

Description

OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Lenovo/Bm Nextscale Fan Power Controller
cpe:2.3:a:lenovo:bm_nextscale_fan_power_controller:*:*:*:*:*:*:*:*
Range: <24p-2.15
Lenovo/Cmm
cpe:2.3:a:lenovo:cmm:*:*:*:*:*:*:*:*
Range: <1.8.0
Lenovo/Fan Power Controller
cpe:2.3:a:lenovo:fan_power_controller:*:*:*:*:*:*:*:*
Range: <30r-1.13
Lenovo/Imm1
cpe:2.3:a:lenovo:imm1:*:*:*:*:*:*:*:*
Range: <1.55
Lenovo/IMM2
cpe:2.3:a:lenovo:imm2:*:*:*:*:*:*:*:*
Range: <4.70
Lenovo/Xclarity Administrator
cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*
Range: <1.4.0
Openslp/Openslp3 versions
cpe:2.3:a:openslp:openslp:1.0.2:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:openslp:openslp:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:openslp:openslp:1.1.0:*:*:*:*:*:*:*
- (no CPE)range: 1.0.2, 1.1.0
Canonical/Ubuntu Linux2 versions
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*+ 1 more
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Debian/linux
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Lenovo/Flex System Fc3171 8gb San Switch Firmware
cpe:2.3:o:lenovo:flex_system_fc3171_8gb_san_switch_firmware:*:*:*:*:*:*:*:*
Range: <9.1.13.02.00
Lenovo/Storage N3310 Firmware
cpe:2.3:o:lenovo:storage_n3310_firmware:*:*:*:*:*:*:*:*
Range: <4.53.351
Lenovo/Storage N4610 Firmware
cpe:2.3:o:lenovo:storage_n4610_firmware:*:*:*:*:*:*:*:*
Range: <4.53.351
Lenovo/Thinkserver Rd340 Firmware
cpe:2.3:o:lenovo:thinkserver_rd340_firmware:*:*:*:*:*:*:*:*
Range: <50.00
Lenovo/Thinkserver Rd350
cpe:2.3:o:lenovo:thinkserver_rd350_firmware:*:*:*:*:*:*:*:*
Range: <4.53.351
Lenovo/Thinkserver Rd350g Firmware
cpe:2.3:o:lenovo:thinkserver_rd350g_firmware:-:*:*:*:*:*:*:*
Lenovo/Thinkserver Rd350x Firmware
cpe:2.3:o:lenovo:thinkserver_rd350x_firmware:-:*:*:*:*:*:*:*
Lenovo/Thinkserver Rd440 Firmware
cpe:2.3:o:lenovo:thinkserver_rd440_firmware:*:*:*:*:*:*:*:*
Range: <=50.00
Lenovo/Thinkserver Rd450 Firmware
cpe:2.3:o:lenovo:thinkserver_rd450_firmware:*:*:*:*:*:*:*:*
Range: <4.53.351
Lenovo/Thinkserver Rd450x Firmware
cpe:2.3:o:lenovo:thinkserver_rd450x_firmware:-:*:*:*:*:*:*:*
Lenovo/Thinkserver Rd540 Firmware2 versions
cpe:2.3:o:lenovo:thinkserver_rd540_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:lenovo:thinkserver_rd540_firmware:*:*:*:*:*:*:*:*range: <50.00
- cpe:2.3:o:lenovo:thinkserver_rd650_firmware:*:*:*:*:*:*:*:*range: <4.53.351
Lenovo/Thinkserver Rd550
cpe:2.3:o:lenovo:thinkserver_rd550_firmware:*:*:*:*:*:*:*:*
Range: <4.53.351
Lenovo/Thinkserver Rd640 Firmware
cpe:2.3:o:lenovo:thinkserver_rd640_firmware:*:*:*:*:*:*:*:*
Range: <50.00
Lenovo/Thinkserver Rq750 Firmware
cpe:2.3:o:lenovo:thinkserver_rq750_firmware:*:*:*:*:*:*:*:*
Range: <1.40
Lenovo/Thinkserver Rs160 Firmware
cpe:2.3:o:lenovo:thinkserver_rs160_firmware:*:*:*:*:*:*:*:*
Range: <2.32
Lenovo/Thinkserver Sd350 Firmware
cpe:2.3:o:lenovo:thinkserver_sd350_firmware:-:*:*:*:*:*:*:*
Lenovo/Thinkserver Td340 Firmware2 versions
cpe:2.3:o:lenovo:thinkserver_td340_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:lenovo:thinkserver_td340_firmware:*:*:*:*:*:*:*:*range: <46.00
- cpe:2.3:o:lenovo:thinkserver_td350_firmware:*:*:*:*:*:*:*:*range: <4.53.351
Lenovo/Thinkserver Ts460 Firmware
cpe:2.3:o:lenovo:thinkserver_ts460_firmware:*:*:*:*:*:*:*:*
Range: <2.32
Lenovo/Thinksystem Hr630x Firmware
cpe:2.3:o:lenovo:thinksystem_hr630x_firmware:-:*:*:*:*:*:*:*
Lenovo/Thinksystem Hr650x Firmware
cpe:2.3:o:lenovo:thinksystem_hr650x_firmware:-:*:*:*:*:*:*:*
Lenovo/Thinksystem Sr630 Firmware
cpe:2.3:o:lenovo:thinksystem_sr630_firmware:-:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Desktop2 versions
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server2 versions
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Aus
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Eus2 versions
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Tus
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Workstation2 versions
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
osv-coords23 versions
pkg:rpm/suse/openslp&distro=SUSE%20Enterprise%20Storage%204 pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015 pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015 pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3 pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/openslp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/openslp&distro=SUSE%20OpenStack%20Cloud%207 pkg:rpm/suse/openslp-openssl1&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/openslp-openssl1&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/openslp-openssl1&distro=SUSE%20Linux%20Enterprise%20Server%2011-SECURITY
< 2.0.0-18.15.1+ 22 more
- (no CPE)range: < 2.0.0-18.15.1
- (no CPE)range: < 2.0.0-18.15.1
- (no CPE)range: < 2.0.0-6.3.1
- (no CPE)range: < 2.0.0-6.3.1
- (no CPE)range: < 1.2.0-172.27.3.1
- (no CPE)range: < 1.2.0-172.27.3.1
- (no CPE)range: < 1.2.0-172.27.3.1
- (no CPE)range: < 1.2.0-172.27.3.1
- (no CPE)range: < 2.0.0-18.15.1
- (no CPE)range: < 2.0.0-18.15.1
- (no CPE)range: < 2.0.0-18.15.1
- (no CPE)range: < 2.0.0-18.15.1
- (no CPE)range: < 2.0.0-18.15.1
- (no CPE)range: < 1.2.0-172.27.3.1
- (no CPE)range: < 2.0.0-18.15.1
- (no CPE)range: < 2.0.0-18.15.1
- (no CPE)range: < 2.0.0-18.15.1
- (no CPE)range: < 1.2.0-172.27.3.1
- (no CPE)range: < 2.0.0-18.15.1
- (no CPE)range: < 2.0.0-18.15.1
- (no CPE)range: < 1.2.0-172.27.3.1
- (no CPE)range: < 1.2.0-172.27.3.1
- (no CPE)range: < 1.2.0-172.27.3.1

Patches

Vulnerability mechanics

References

support.lenovo.com/us/en/solutions/LEN-18247nvdPatchThird Party Advisory
sourceforge.net/p/openslp/mercurial/ci/151f07745901cbdba6e00e4889561b4083250da1/nvdPatchThird Party Advisory
access.redhat.com/errata/RHSA-2018:2240nvdThird Party Advisory
access.redhat.com/errata/RHSA-2018:2308nvdThird Party Advisory
lists.debian.org/debian-lts-announce/2018/04/msg00029.htmlnvdIssue TrackingMailing ListThird Party Advisory
usn.ubuntu.com/3708-1/nvdThird Party Advisory
security.gentoo.org/glsa/202005-12nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000