Actively exploited in the wild
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
VMware - VMware ESXi and Horizon DaaS · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2019-5544
CriticalCVSS 9.8KEVSummary
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
Risk Assessment
Critical risk due to heap overwrite, potentially leading to code execution or system crash.
Recommendation
Apply VMware patches for ESXi and Horizon DaaS to address the OpenSLP vulnerability.
Other vulnerabilities in OpenSLP
See all- CVE-2015-5177High
A double free vulnerability in the SLPDKnownDAAdd function in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (crash) via a crafted package.
- CVE-2016-4912High
The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service via a NULL pointer dereference, leading to a system crash. This can be achieved by sending a large number of crafted packets, triggering a memory allocation failure.
- CVE-2016-7567Critical
Buffer overflow in the SLPFoldWhiteSpace function in OpenSLP 2.0 may allow remote attackers to have unspecified impact via a crafted string.
Original NVD description (English source)
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.