CyberzSOC

Applicability
← Back to CVE-2023-29552

CVE-2023-29552

CVSS 7.5 In CISA KEV IETF

Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.

Does it affect your version?

A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.

What each source says

Red Hat CSAF/VEX
precedence 100 · revised 2025-11-21
11 affected 2 not affected
CVE List v5 (CNA container)
precedence 60 · revised 2025-10-21
1 affected

Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.

Statements (14)

Product Status Versions Remediation Source
red_hat_enterprise_linux_6:openslp openslp as a component of Red Hat Enterprise Linux 6 affected no version stated vendor label: openslp out of support csaf_redhat
red_hat_enterprise_linux_7:openslp openslp as a component of Red Hat Enterprise Linux 7 affected no version stated vendor label: openslp no fix planned csaf_redhat
red_hat_enterprise_linux_9:openslp openslp as a component of Red Hat Enterprise Linux 9 affected no version stated vendor label: openslp no fix planned csaf_redhat
red_hat_enterprise_linux_6:openslp-devel openslp-devel as a component of Red Hat Enterprise Linux 6 affected no version stated vendor label: openslp-devel out of support csaf_redhat
red_hat_enterprise_linux_7:openslp-devel openslp-devel as a component of Red Hat Enterprise Linux 7 affected no version stated vendor label: openslp-devel no fix planned csaf_redhat
red_hat_enterprise_linux_9:openslp-devel openslp-devel as a component of Red Hat Enterprise Linux 9 affected no version stated vendor label: openslp-devel no fix planned csaf_redhat
red_hat_enterprise_linux_6:openslp-server openslp-server as a component of Red Hat Enterprise Linux 6 affected no version stated vendor label: openslp-server out of support csaf_redhat
red_hat_enterprise_linux_7:openslp-server openslp-server as a component of Red Hat Enterprise Linux 7 affected no version stated vendor label: openslp-server no fix planned csaf_redhat
red_hat_enterprise_linux_9:openslp-server openslp-server as a component of Red Hat Enterprise Linux 9 affected no version stated vendor label: openslp-server no fix planned csaf_redhat
red_hat_enterprise_linux_6:openslp.src openslp.src as a component of Red Hat Enterprise Linux 6 affected no version stated vendor label: openslp.src out of support csaf_redhat
red_hat_enterprise_linux_7:openslp.src openslp.src as a component of Red Hat Enterprise Linux 7 affected no version stated vendor label: openslp.src no fix planned csaf_redhat
red_hat_enterprise_linux_8:openslp openslp as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present no version stated vendor label: openslp not applicable csaf_redhat
red_hat_enterprise_linux_8:openslp-devel openslp-devel as a component of Red Hat Enterprise Linux 8 not affected vulnerable code not present no version stated vendor label: openslp-devel not applicable csaf_redhat
n/a/n/a n/a · n/a affected no version stated vendor label: all versions none available cve_cna

A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.