CVE-2021-21974

OpenSLP: heap-overflow

Published Feb 24, 2021 CVSS 3.1 · 8.8 High EPSS 45.1% KEV · Not listed
Description
OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflow vulnerability. A malicious actor residing within the same network segment as ESXi who has access to port 427 may be able to trigger the heap-overflow issue in OpenSLP service resulting in remote code execution.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
vmware
Published
Updated
Jun 2, 2026, 8:00 PM
Reserved
Jan 4, 2021, 12:00 AM
Status
Modified
Published
Feb 24, 2021, 5:15 PM
Modified
Jun 17, 2026, 3:36 AM
Severity
Important
Public date
Feb 24, 2021, 12:00 AM