CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-5544

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.871

EPSS Ranking 99.4%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

Proposed Action

VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.

Ransomware Campaign

Known

References

Products affected by CVE-2019-5544

Openslp » Openslp » Version: 0.6.1

cpe:2.3:a:openslp:openslp:0.6.1
Openslp » Openslp » Version: 0.6.2

cpe:2.3:a:openslp:openslp:0.6.2
Openslp » Openslp » Version: 0.6.3

cpe:2.3:a:openslp:openslp:0.6.3
Openslp » Openslp » Version: 0.6.4

cpe:2.3:a:openslp:openslp:0.6.4
Openslp » Openslp » Version: 0.6.5

cpe:2.3:a:openslp:openslp:0.6.5
Openslp » Openslp » Version: 0.6.6

cpe:2.3:a:openslp:openslp:0.6.6
Openslp » Openslp » Version: 0.6.7

cpe:2.3:a:openslp:openslp:0.6.7
Openslp » Openslp » Version: 0.7.0

cpe:2.3:a:openslp:openslp:0.7.0
Openslp » Openslp » Version: 0.7.1

cpe:2.3:a:openslp:openslp:0.7.1
Openslp » Openslp » Version: 0.7.2

cpe:2.3:a:openslp:openslp:0.7.2
Openslp » Openslp » Version: 0.7.5

cpe:2.3:a:openslp:openslp:0.7.5
Openslp » Openslp » Version: 0.7.6

cpe:2.3:a:openslp:openslp:0.7.6
Openslp » Openslp » Version: 0.7.7

cpe:2.3:a:openslp:openslp:0.7.7
Openslp » Openslp » Version: 0.7.8

cpe:2.3:a:openslp:openslp:0.7.8
Openslp » Openslp » Version: 0.8.0

cpe:2.3:a:openslp:openslp:0.8.0
Openslp » Openslp » Version: 0.8.1

cpe:2.3:a:openslp:openslp:0.8.1
Openslp » Openslp » Version: 0.8.2

cpe:2.3:a:openslp:openslp:0.8.2
Openslp » Openslp » Version: 0.8.3

cpe:2.3:a:openslp:openslp:0.8.3
Openslp » Openslp » Version: 0.9.0

cpe:2.3:a:openslp:openslp:0.9.0
Openslp » Openslp » Version: 0.9.1

cpe:2.3:a:openslp:openslp:0.9.1
Openslp » Openslp » Version: 1.0.0

cpe:2.3:a:openslp:openslp:1.0.0
Openslp » Openslp » Version: 1.0.1

cpe:2.3:a:openslp:openslp:1.0.1
Openslp » Openslp » Version: 1.0.10

cpe:2.3:a:openslp:openslp:1.0.10
Openslp » Openslp » Version: 1.0.11

cpe:2.3:a:openslp:openslp:1.0.11
Openslp » Openslp » Version: 1.0.2

cpe:2.3:a:openslp:openslp:1.0.2
Openslp » Openslp » Version: 1.0.3

cpe:2.3:a:openslp:openslp:1.0.3
Openslp » Openslp » Version: 1.0.4

cpe:2.3:a:openslp:openslp:1.0.4
Openslp » Openslp » Version: 1.0.5

cpe:2.3:a:openslp:openslp:1.0.5
Openslp » Openslp » Version: 1.0.6

cpe:2.3:a:openslp:openslp:1.0.6
Openslp » Openslp » Version: 1.0.7

cpe:2.3:a:openslp:openslp:1.0.7
Openslp » Openslp » Version: 1.0.8a

cpe:2.3:a:openslp:openslp:1.0.8a
Openslp » Openslp » Version: 1.0.9a

cpe:2.3:a:openslp:openslp:1.0.9a
Openslp » Openslp » Version: 1.1.0

cpe:2.3:a:openslp:openslp:1.1.0
Openslp » Openslp » Version: 1.2.0

cpe:2.3:a:openslp:openslp:1.2.0
Openslp » Openslp » Version: 1.2.1

cpe:2.3:a:openslp:openslp:1.2.1
Openslp » Openslp » Version: 2.0.0

cpe:2.3:a:openslp:openslp:2.0.0
Vmware » Horizon Daas » Version: 8.0.0

cpe:2.3:a:vmware:horizon_daas:8.0.0
Vmware » Horizon Daas » Version: 8.0.1

cpe:2.3:a:vmware:horizon_daas:8.0.1
Fedoraproject » Fedora » Version: 30

cpe:2.3:o:fedoraproject:fedora:30
Fedoraproject » Fedora » Version: 31

cpe:2.3:o:fedoraproject:fedora:31
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux For Ibm Z Systems » Version: 6.0_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0_s390x
Redhat » Enterprise Linux For Ibm Z Systems » Version: 7.0_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x
Redhat » Enterprise Linux For Ibm Z Systems Eus » Version: 7.7_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.7_s390x
Redhat » Enterprise Linux For Power Big Endian » Version: 6.0_ppc64

cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64
Redhat » Enterprise Linux For Power Big Endian » Version: 7.0_ppc64

cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64
Redhat » Enterprise Linux For Power Big Endian Eus » Version: 7.7_ppc64

cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64
Redhat » Enterprise Linux For Power Little Endian » Version: 7.0_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0_ppc64le
Redhat » Enterprise Linux For Power Little Endian Eus » Version: 7.7_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.7_ppc64le
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7
Redhat » Enterprise Linux Server Eus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7
Redhat » Enterprise Linux Server Tus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0
Vmware » Esxi » Version: 6.0

cpe:2.3:o:vmware:esxi:6.0
Vmware » Esxi » Version: 6.5

cpe:2.3:o:vmware:esxi:6.5
Vmware » Esxi » Version: 6.7

cpe:2.3:o:vmware:esxi:6.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-5544

Products

Pricing

Contact Us