CVE:CVE-2012-4428
CNNVD:CNNVD-201209-514
OpenSLP（Service Location Protocol，服务位置协议）是OpenSLP项目的一个IETF标准协议，用于在互联网内动态的服务发现。该协议支持通过服务的类型、属性在网络中查寻服务。
OpenSLP中的‘SLPIntersectStringList()’函数存在缓冲区错误漏洞。远程攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade openslp openslp to a higher version than 1.2.1,and avoid the version 1.2.1; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 20,and avoid the version 20; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,and avoid the version 12.04,14.04