CVE-2017-17833: Canonical Ubuntu Linux

Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days.

OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-service or a remote code-execution vulnerability.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only
• Debian Debian Linux: version 7.0 only
• Lenovo Bm Nextscale Fan Power Controller: before 24p-2.15 (fixed in 24p-2.15)
• Lenovo Cmm: before 1.8.0 (fixed in 1.8.0)
• Lenovo Fan Power Controller: before 30r-1.13 (fixed in 30r-1.13)
• Lenovo Flex System FC3171 8gb San Switch Firmware: before 9.1.13.02.00 (fixed in 9.1.13.02.00)
• Lenovo IMM1: before 1.55 (fixed in 1.55)
• Lenovo IMM2: before 4.70 (fixed in 4.70)
• Lenovo Storage n3310 Firmware: before 4.53.351 (fixed in 4.53.351)
• Lenovo Storage n4610 Firmware: before 4.53.351 (fixed in 4.53.351)
• Lenovo Thinkserver RD340 Firmware: before 50.00 (fixed in 50.00)
• Lenovo Thinkserver RD350 Firmware: before 4.53.351 (fixed in 4.53.351)
• Lenovo Thinkserver RD350G Firmware: affected versions not specified
• Lenovo Thinkserver RD350X Firmware: affected versions not specified
• Lenovo Thinkserver RD440 Firmware: up to and including 50.00
• Lenovo Thinkserver RD450 Firmware: before 4.53.351 (fixed in 4.53.351)
• Lenovo Thinkserver RD450X Firmware: affected versions not specified
• Lenovo Thinkserver RD540 Firmware: before 50.00 (fixed in 50.00)
• Lenovo Thinkserver RD550 Firmware: before 4.53.351 (fixed in 4.53.351)
• Lenovo Thinkserver RD640 Firmware: before 50.00 (fixed in 50.00)
• Lenovo Thinkserver RD650 Firmware: before 4.53.351 (fixed in 4.53.351)
• Lenovo Thinkserver RQ750 Firmware: before 1.40 (fixed in 1.40)
• Lenovo Thinkserver RS160 Firmware: before 2.32 (fixed in 2.32)
• Lenovo Thinkserver SD350 Firmware: affected versions not specified
• Lenovo Thinkserver TD340 Firmware: before 46.00 (fixed in 46.00)
• and 13 more

Published 2018-04-23. Last modified 2026-06-17.