Home

CVE-2019-5544

Description

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
92.688

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2019-5544 are affected in Horizon DaaS 8.0.1Windows
(RHSA-2019:4240) openslp security update openslp-2.0.0-8.el7_7.i686.rpmLinux
(RHSA-2019:4240) openslp security update openslp-2.0.0-8.el7_7.x86_64.rpmLinux
(RHSA-2019:4240) openslp security update openslp-devel-2.0.0-8.el7_7.i686.rpmLinux
(RHSA-2019:4240) openslp security update openslp-devel-2.0.0-8.el7_7.x86_64.rpmLinux
(RHSA-2019:4240) openslp security update openslp-server-2.0.0-8.el7_7.x86_64.rpmLinux
(RHSA-2020:0199) openslp security update openslp-2.0.0-4.el6_10.i686.rpmLinux
(RHSA-2020:0199) openslp security update openslp-2.0.0-4.el6_10.x86_64.rpmLinux
(RHSA-2020:0199) openslp security update openslp-devel-2.0.0-4.el6_10.i686.rpmLinux
(RHSA-2020:0199) openslp security update openslp-devel-2.0.0-4.el6_10.x86_64.rpmLinux
(RHSA-2020:0199) openslp security update openslp-server-2.0.0-4.el6_10.i686.rpmLinux
(RHSA-2020:0199) openslp security update openslp-server-2.0.0-4.el6_10.x86_64.rpmLinux
Openslp update (ELSA-2020-0199) openslp-2.0.0-4.el6_10.x86_64.rpmLinux
Openslp-devel update (ELSA-2020-0199) openslp-devel-2.0.0-4.el6_10.x86_64.rpmLinux
Openslp-server update (ELSA-2020-0199) openslp-server-2.0.0-4.el6_10.x86_64.rpmLinux
Openslp update (ELSA-2020-0199) openslp-2.0.0-4.el6_10.i686.rpmLinux
Openslp-devel update (ELSA-2020-0199) openslp-devel-2.0.0-4.el6_10.i686.rpmLinux
Openslp-server update (ELSA-2020-0199) openslp-server-2.0.0-4.el6_10.i686.rpmLinux
Service Location Protocol library (USN-4919-1) libslp1_1.2.1-11ubuntu0.16.04.2_i386.debLinux
Service Location Protocol library (USN-4919-1) libslp1_1.2.1-11ubuntu0.16.04.2_amd64.debLinux
(CESA-2020:0199) openslp security update openslp-2.0.0-4.el6_10.i686.rpmLinux
(CESA-2020:0199) openslp security update openslp-2.0.0-4.el6_10.x86_64.rpmLinux
(CESA-2020:0199) openslp security update openslp-devel-2.0.0-4.el6_10.i686.rpmLinux
(CESA-2020:0199) openslp security update openslp-devel-2.0.0-4.el6_10.x86_64.rpmLinux
(CESA-2020:0199) openslp security update openslp-server-2.0.0-4.el6_10.i686.rpmLinux
(CESA-2020:0199) openslp security update openslp-server-2.0.0-4.el6_10.x86_64.rpmLinux
(RHSA-2019:4240)Critical: security update openslp-debuginfo-2.0.0-8.el7_7.i686.rpmLinux
(RHSA-2019:4240)Critical: security update openslp-debuginfo-2.0.0-8.el7_7.x86_64.rpmLinux
openslp Security Update (ALAS-2019-1378) openslp-2.0.0-8.amzn2.i686.rpmLinux
openslp Security Update (ALAS-2019-1378) openslp-2.0.0-8.amzn2.x86_64.rpmLinux
openslp Security Update (ALAS-2019-1378) openslp-devel-2.0.0-8.amzn2.x86_64.rpmLinux
openslp Security Update (ALAS-2019-1378) openslp-server-2.0.0-8.amzn2.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234