CVE-2019-5544

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.

Affected products

Alt Linux, Centos, Horizon Daas, Openslp, Red Hat, Ubuntu, Vmware Esxi

Vmware Horizon Daas

< 9.0.0.0

Vmware Esxi

= 6.0, 6.5, 6.7

CVSS 3.1

9.8 CRITICAL

EPSS

96.8% (100th percentile)

Weakness

CWE-787

NVD status

Analyzed

Published

2019-12-06