Lucene search
HistoryDec 06, 2019 - 4:15 p.m.
CVE-2019-5544
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.4
Confidence
High
EPSS
0.029
Percentile
90.9%
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
Affected configurations
Node
vmwarehorizon_daasRange8.0.0–9.0.0.0
ORvmwareesxiMatch6.0-
ORvmwareesxiMatch6.01
ORvmwareesxiMatch6.01a
ORvmwareesxiMatch6.01b
ORvmwareesxiMatch6.02
ORvmwareesxiMatch6.03
ORvmwareesxiMatch6.03a
ORvmwareesxiMatch6.0600-201504401
ORvmwareesxiMatch6.0600-201505401
ORvmwareesxiMatch6.0600-201507101
ORvmwareesxiMatch6.0600-201507102
ORvmwareesxiMatch6.0600-201507401
ORvmwareesxiMatch6.0600-201507402
ORvmwareesxiMatch6.0600-201507403
ORvmwareesxiMatch6.0600-201507404
ORvmwareesxiMatch6.0600-201507405
ORvmwareesxiMatch6.0600-201507406
ORvmwareesxiMatch6.0600-201507407
ORvmwareesxiMatch6.0600-201509101
ORvmwareesxiMatch6.0600-201509102
ORvmwareesxiMatch6.0600-201509201
ORvmwareesxiMatch6.0600-201509202
ORvmwareesxiMatch6.0600-201509203
ORvmwareesxiMatch6.0600-201509204
ORvmwareesxiMatch6.0600-201509205
ORvmwareesxiMatch6.0600-201509206
ORvmwareesxiMatch6.0600-201509207
ORvmwareesxiMatch6.0600-201509208
ORvmwareesxiMatch6.0600-201509209
ORvmwareesxiMatch6.0600-201509210
ORvmwareesxiMatch6.0600-201510401
ORvmwareesxiMatch6.0600-201511401
ORvmwareesxiMatch6.0600-201601101
ORvmwareesxiMatch6.0600-201601102
ORvmwareesxiMatch6.0600-201601401
ORvmwareesxiMatch6.0600-201601402
ORvmwareesxiMatch6.0600-201601403
ORvmwareesxiMatch6.0600-201601404
ORvmwareesxiMatch6.0600-201601405
ORvmwareesxiMatch6.0600-201602401
ORvmwareesxiMatch6.0600-201603101
ORvmwareesxiMatch6.0600-201603102
ORvmwareesxiMatch6.0600-201603201
ORvmwareesxiMatch6.0600-201603202
ORvmwareesxiMatch6.0600-201603203
ORvmwareesxiMatch6.0600-201603204
ORvmwareesxiMatch6.0600-201603205
ORvmwareesxiMatch6.0600-201603206
ORvmwareesxiMatch6.0600-201603207
ORvmwareesxiMatch6.0600-201603208
ORvmwareesxiMatch6.0600-201605401
ORvmwareesxiMatch6.0600-201608101
ORvmwareesxiMatch6.0600-201608401
ORvmwareesxiMatch6.0600-201608402
ORvmwareesxiMatch6.0600-201608403
ORvmwareesxiMatch6.0600-201608404
ORvmwareesxiMatch6.0600-201608405
ORvmwareesxiMatch6.0600-201610410
ORvmwareesxiMatch6.0600-201611401
ORvmwareesxiMatch6.0600-201611402
ORvmwareesxiMatch6.0600-201611403
ORvmwareesxiMatch6.0600-201702101
ORvmwareesxiMatch6.0600-201702102
ORvmwareesxiMatch6.0600-201702201
ORvmwareesxiMatch6.0600-201702202
ORvmwareesxiMatch6.0600-201702203
ORvmwareesxiMatch6.0600-201702204
ORvmwareesxiMatch6.0600-201702205
ORvmwareesxiMatch6.0600-201702206
ORvmwareesxiMatch6.0600-201702207
ORvmwareesxiMatch6.0600-201702208
ORvmwareesxiMatch6.0600-201702209
ORvmwareesxiMatch6.0600-201702210
ORvmwareesxiMatch6.0600-201702211
ORvmwareesxiMatch6.0600-201702212
ORvmwareesxiMatch6.0600-201703401
ORvmwareesxiMatch6.0600-201706101
ORvmwareesxiMatch6.0600-201706102
ORvmwareesxiMatch6.0600-201706103
ORvmwareesxiMatch6.0600-201706401
ORvmwareesxiMatch6.0600-201706402
ORvmwareesxiMatch6.0600-201706403
ORvmwareesxiMatch6.0600-201710301
ORvmwareesxiMatch6.0600-201811001
ORvmwareesxiMatch6.0600-201811401
ORvmwareesxiMatch6.5-
ORvmwareesxiMatch6.5650-201701001
ORvmwareesxiMatch6.5650-201703001
ORvmwareesxiMatch6.5650-201703002
ORvmwareesxiMatch6.5650-201704001
ORvmwareesxiMatch6.5650-201707101
ORvmwareesxiMatch6.5650-201707102
ORvmwareesxiMatch6.5650-201707103
ORvmwareesxiMatch6.5650-201707201
ORvmwareesxiMatch6.5650-201707202
ORvmwareesxiMatch6.5650-201707203
ORvmwareesxiMatch6.5650-201707204
ORvmwareesxiMatch6.5650-201707205
ORvmwareesxiMatch6.5650-201707206
ORvmwareesxiMatch6.5650-201707207
ORvmwareesxiMatch6.5650-201707208
ORvmwareesxiMatch6.5650-201707209
ORvmwareesxiMatch6.5650-201707210
ORvmwareesxiMatch6.5650-201707211
ORvmwareesxiMatch6.5650-201707212
ORvmwareesxiMatch6.5650-201707213
ORvmwareesxiMatch6.5650-201707214
ORvmwareesxiMatch6.5650-201707215
ORvmwareesxiMatch6.5650-201707216
ORvmwareesxiMatch6.5650-201707217
ORvmwareesxiMatch6.5650-201707218
ORvmwareesxiMatch6.5650-201707219
ORvmwareesxiMatch6.5650-201707220
ORvmwareesxiMatch6.5650-201707221
ORvmwareesxiMatch6.5650-201710001
ORvmwareesxiMatch6.5650-201712001
ORvmwareesxiMatch6.5650-201803001
ORvmwareesxiMatch6.5650-201806001
ORvmwareesxiMatch6.5650-201808001
ORvmwareesxiMatch6.5650-201810001
ORvmwareesxiMatch6.5650-201810002
ORvmwareesxiMatch6.5650-201811001
ORvmwareesxiMatch6.5650-201811002
ORvmwareesxiMatch6.5650-201811301
ORvmwareesxiMatch6.5650-201901001
ORvmwareesxiMatch6.5650-201903001
ORvmwareesxiMatch6.5650-201905001
ORvmwareesxiMatch6.5650-201908001
ORvmwareesxiMatch6.5650-201910001
ORvmwareesxiMatch6.5650-20191004001
ORvmwareesxiMatch6.5650-201911001
ORvmwareesxiMatch6.5650-201911401
ORvmwareesxiMatch6.5650-201911402
ORvmwareesxiMatch6.7-
ORvmwareesxiMatch6.7670-201806001
ORvmwareesxiMatch6.7670-201807001
ORvmwareesxiMatch6.7670-201808001
ORvmwareesxiMatch6.7670-201810001
ORvmwareesxiMatch6.7670-201810101
ORvmwareesxiMatch6.7670-201810102
ORvmwareesxiMatch6.7670-201810103
ORvmwareesxiMatch6.7670-201810201
ORvmwareesxiMatch6.7670-201810202
ORvmwareesxiMatch6.7670-201810203
ORvmwareesxiMatch6.7670-201810204
ORvmwareesxiMatch6.7670-201810205
ORvmwareesxiMatch6.7670-201810206
ORvmwareesxiMatch6.7670-201810207
ORvmwareesxiMatch6.7670-201810208
ORvmwareesxiMatch6.7670-201810209
ORvmwareesxiMatch6.7670-201810210
ORvmwareesxiMatch6.7670-201810211
ORvmwareesxiMatch6.7670-201810212
ORvmwareesxiMatch6.7670-201810213
ORvmwareesxiMatch6.7670-201810214
ORvmwareesxiMatch6.7670-201810215
ORvmwareesxiMatch6.7670-201810216
ORvmwareesxiMatch6.7670-201810217
ORvmwareesxiMatch6.7670-201810218
ORvmwareesxiMatch6.7670-201810219
ORvmwareesxiMatch6.7670-201810220
ORvmwareesxiMatch6.7670-201810221
ORvmwareesxiMatch6.7670-201810222
ORvmwareesxiMatch6.7670-201810223
ORvmwareesxiMatch6.7670-201810224
ORvmwareesxiMatch6.7670-201810225
ORvmwareesxiMatch6.7670-201810226
ORvmwareesxiMatch6.7670-201810227
ORvmwareesxiMatch6.7670-201810228
ORvmwareesxiMatch6.7670-201810229
ORvmwareesxiMatch6.7670-201810230
ORvmwareesxiMatch6.7670-201810231
ORvmwareesxiMatch6.7670-201810232
ORvmwareesxiMatch6.7670-201810233
ORvmwareesxiMatch6.7670-201810234
ORvmwareesxiMatch6.7670-201811001
ORvmwareesxiMatch6.7670-201901001
ORvmwareesxiMatch6.7670-201901401
ORvmwareesxiMatch6.7670-201901402
ORvmwareesxiMatch6.7670-201901403
ORvmwareesxiMatch6.7670-201903001
ORvmwareesxiMatch6.7670-201904001
ORvmwareesxiMatch6.7670-201904201
ORvmwareesxiMatch6.7670-201904202
ORvmwareesxiMatch6.7670-201904203
ORvmwareesxiMatch6.7670-201904204
ORvmwareesxiMatch6.7670-201904205
ORvmwareesxiMatch6.7670-201904206
ORvmwareesxiMatch6.7670-201904207
ORvmwareesxiMatch6.7670-201904208
ORvmwareesxiMatch6.7670-201904209
ORvmwareesxiMatch6.7670-201904210
ORvmwareesxiMatch6.7670-201904211
ORvmwareesxiMatch6.7670-201904212
ORvmwareesxiMatch6.7670-201904213
ORvmwareesxiMatch6.7670-201904214
ORvmwareesxiMatch6.7670-201904215
ORvmwareesxiMatch6.7670-201904216
ORvmwareesxiMatch6.7670-201904217
ORvmwareesxiMatch6.7670-201904218
ORvmwareesxiMatch6.7670-201904219
ORvmwareesxiMatch6.7670-201904220
ORvmwareesxiMatch6.7670-201904221
ORvmwareesxiMatch6.7670-201904222
ORvmwareesxiMatch6.7670-201904223
ORvmwareesxiMatch6.7670-201904224
ORvmwareesxiMatch6.7670-201904225
ORvmwareesxiMatch6.7670-201904226
ORvmwareesxiMatch6.7670-201904227
ORvmwareesxiMatch6.7670-201904228
ORvmwareesxiMatch6.7670-201904229
ORvmwareesxiMatch6.7670-201905001
ORvmwareesxiMatch6.7670-201906002
ORvmwareesxiMatch6.7670-201908101
ORvmwareesxiMatch6.7670-201908102
ORvmwareesxiMatch6.7670-201908103
ORvmwareesxiMatch6.7670-201908104
ORvmwareesxiMatch6.7670-201908201
ORvmwareesxiMatch6.7670-201908202
ORvmwareesxiMatch6.7670-201908203
ORvmwareesxiMatch6.7670-201908204
ORvmwareesxiMatch6.7670-201908205
ORvmwareesxiMatch6.7670-201908206
ORvmwareesxiMatch6.7670-201908207
ORvmwareesxiMatch6.7670-201908208
ORvmwareesxiMatch6.7670-201908209
ORvmwareesxiMatch6.7670-201908210
ORvmwareesxiMatch6.7670-201908211
ORvmwareesxiMatch6.7670-201908212
ORvmwareesxiMatch6.7670-201908213
ORvmwareesxiMatch6.7670-201908214
ORvmwareesxiMatch6.7670-201908215
ORvmwareesxiMatch6.7670-201908216
ORvmwareesxiMatch6.7670-201908217
ORvmwareesxiMatch6.7670-201908218
ORvmwareesxiMatch6.7670-201908219
ORvmwareesxiMatch6.7670-201908220
ORvmwareesxiMatch6.7670-201908221
ORvmwareesxiMatch6.7670-201911001
Node
redhatenterprise_linux_desktopMatch6.0
ORredhatenterprise_linux_desktopMatch7.0
ORredhatenterprise_linux_for_ibm_z_systemsMatch6.0_s390x
ORredhatenterprise_linux_for_ibm_z_systemsMatch7.0_s390x
ORredhatenterprise_linux_for_ibm_z_systems_eusMatch7.7_s390x
ORredhatenterprise_linux_for_power_big_endianMatch6.0_ppc64
ORredhatenterprise_linux_for_power_big_endianMatch7.0_ppc64
ORredhatenterprise_linux_for_power_big_endian_eusMatch7.7_ppc64
ORredhatenterprise_linux_for_power_little_endianMatch7.0_ppc64le
ORredhatenterprise_linux_for_power_little_endian_eusMatch7.7_ppc64le
ORredhatenterprise_linux_serverMatch6.0
ORredhatenterprise_linux_serverMatch7.0
ORredhatenterprise_linux_server_ausMatch7.7
ORredhatenterprise_linux_server_eusMatch7.7
ORredhatenterprise_linux_server_tusMatch7.7
ORredhatenterprise_linux_workstationMatch6.0
ORredhatenterprise_linux_workstationMatch7.0
Node
openslpopenslpRange≤2.0.0
Node
fedoraprojectfedoraMatch30
ORfedoraprojectfedoraMatch31
| Vendor | Product | Version | CPE |
|---|---|---|---|
| vmware | horizon_daas | * | cpe:2.3:a:vmware:horizon_daas:*:*:*:*:*:*:*:* |
| vmware | esxi | 6.0 | cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:* |
| vmware | esxi | 6.0 | cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:* |
| vmware | esxi | 6.0 | cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:* |
| vmware | esxi | 6.0 | cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:* |
| vmware | esxi | 6.0 | cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:* |
| vmware | esxi | 6.0 | cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:* |
| vmware | esxi | 6.0 | cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:* |
| vmware | esxi | 6.0 | cpe:2.3:o:vmware:esxi:6.0:600-201504401:*:*:*:*:*:* |
| vmware | esxi | 6.0 | cpe:2.3:o:vmware:esxi:6.0:600-201505401:*:*:*:*:*:* |
References
www.openwall.com/lists/oss-security/2019/12/10/2
www.openwall.com/lists/oss-security/2019/12/11/2
www.vmware.com/security/advisories/VMSA-2019-0022.html
access.redhat.com/errata/RHSA-2019:4240
access.redhat.com/errata/RHSA-2020:0199
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA3LYAJ2NRKMOZLZOQNDJ5TNQRFMWGHF/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPXXJZLPLAQULBCJVI5NNWZ3PGWXGXWG/
security.gentoo.org/glsa/202005-12
Related
redhat
redhat
(RHSA-2019:4240) Critical: openslp security update
2019-12-16 09:01:28
(RHSA-2020:0199) Critical: openslp security update
2020-01-22 11:43:37
cbl_mariner
cbl_mariner
CVE-2019-5544 affecting package openslp for versions less than 2.0.0-26
2024-04-03 00:40:51
CVE-2019-5544 affecting package openslp for versions less than 2.0.0-26
2022-12-09 01:51:00
nessus
nessus
CentOS 6 : openslp (CESA-2020:0199)
2020-01-30 00:00:00
CentOS 7 : openslp (CESA-2019:4240)
2019-12-27 00:00:00
CBL Mariner 2.0 Security Update: openslp (CVE-2019-5544)
2024-07-03 00:00:00
centos
centos
openslp security update
2020-01-28 21:23:29
openslp security update
2019-12-24 15:56:45
fedora
fedora
[SECURITY] Fedora 30 Update: openslp-2.0.0-22.fc30
2019-12-18 15:17:11
[SECURITY] Fedora 31 Update: openslp-2.0.0-23.fc31
2019-12-18 01:55:51
openvas
openvas
Fedora Update for openslp FEDORA-2019-86bceb61b3
2019-12-22 00:00:00
CentOS: Security Advisory for openslp (CESA-2020:0199)
2020-01-29 00:00:00
Huawei EulerOS: Security Advisory for openslp (EulerOS-SA-2020-1038)
2020-01-23 00:00:00
redhatcve
redhatcve
CVE-2019-5544
2019-12-06 19:47:55
ibm
ibm
mageia
mageia
Updated openslp packages fix security vulnerability
2020-02-09 22:13:40
amazon
amazon
Critical: openslp
2019-12-16 18:45:00
cisa_kev
cisa_kev
symantec
symantec
OpenSLP CVE-2019-5544 Heap Memory Corruption Vulnerability
2019-12-06 00:00:00
oraclelinux
oraclelinux
openslp security update
2020-01-22 00:00:00
openslp security update
2019-12-16 00:00:00
vmware
vmware
veracode
veracode
Remote Code Execution (RCE)
2019-12-17 00:16:18
prion
prion
Heap overflow
2019-12-06 16:15:00
ubuntucve
ubuntucve
CVE-2019-5544
2019-12-06 00:00:00
ubuntu
ubuntu
OpenSLP vulnerability
2021-04-19 00:00:00
osv
osv
openslp-dfsg vulnerability
2021-04-19 19:28:33
openslp-dfsg - security update
2019-12-08 00:00:00
cvelist
cvelist
CVE-2019-5544
2019-12-06 15:54:18
cve
cve
CVE-2019-5544
2019-12-06 16:15:11
attackerkb
attackerkb
CVE-2019-5544 — ESXi OpenSLP remote code execution vulnerability
2019-12-06 00:00:00
CVE-2020-3992 — ESXi OpenSLP remote code execution vulnerability
2020-10-20 00:00:00
checkpoint_advisories
checkpoint_advisories
VMWare OpenSLP Heap Buffer Overflow (CVE-2019-5544; CVE-2021-21974)
2020-02-26 00:00:00
gentoo
gentoo
OpenSLP: Multiple vulnerabilities
2020-05-14 00:00:00
rapid7blog
rapid7blog
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Vmware Horizon Daas
2020-12-01 13:49:26
Exploit for Out-of-bounds Write in Vmware Horizon Daas
2021-02-04 15:15:22
qualysblog
qualysblog
DarkSide Ransomware
2021-06-09 15:00:00
debian
debian
[SECURITY] [DLA 2025-1] openslp-dfsg security update
2019-12-08 12:51:22
securelist
securelist
IT threat evolution Q1 2021
2021-05-31 10:00:37
Cyberthreats to financial organizations in 2022
2021-11-23 10:00:13
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.4
Confidence
High
EPSS
0.029
Percentile
90.9%
Related for NVD:CVE-2019-5544