CVE-2019-5544

openslp: Heap-based buffer overflow in ProcessSrvRqst() in slpd_process.c leading to remote code execution

Published Dec 6, 2019 CVSS 3.1 · 9.8 Critical EPSS 98.1% KEV · Listed
Description
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-2025-1 openslp-dfsg security update
Ubuntu USN Ubuntu USN USN-4919-1 OpenSLP vulnerability
History
Type Values Removed Values Added
Metrics epss

{'score': 0.87066}

epss

{'score': 0.85354}

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2021-11-03'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}