CVE-2016-4912: Openslp

High severity, CVSS 7.5. EPSS: 5.4% chance of exploitation in the next 30 days.

The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a large number of crafted packets, which triggers a memory allocation failure.

Affected products

• Openslp Openslp: version 2.0.0 only

Published 2017-03-27. Last modified 2026-06-17.