CVE-2020-3992

Published Oct 20, 2020 CVSS 3.1 · 9.8 Critical EPSS 83.0% KEV · Listed
Description
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics kev

{'dateAdded': '2021-11-03'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
vmware
Published
Updated
Aug 12, 2026, 3:55 AM
Reserved
Dec 30, 2019, 12:00 AM
Status
Analyzed
Published
Oct 20, 2020, 5:15 PM
Modified
Aug 12, 2026, 5:17 AM