Lucene search
PRIOn knowledge basePRION:CVE-2020-3992HistoryOct 20, 2020 - 5:15 p.m.
Design/Logic Flaw
2020-10-2017:15:00
PRIOn knowledge base
www.prio-n.com
11
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cloud_foundation | ge | 4.0 | |
| cloud_foundation | lt | 4.1 | |
| cloud_foundation | ge | 3.0 | |
| cloud_foundation | lt | 3.10.1.1 | |
| esxi | eq | 6.5 | |
| esxi | eq | 6.5 | |
| esxi | eq | 6.5 | |
| esxi | eq | 6.5 | |
| esxi | eq | 6.5 | |
| esxi | eq | 6.5 |
Related
zdi
zdi
VMware ESXi SLP Use-After-Free Privilege Escalation Vulnerability
2020-11-25 00:00:00
VMware ESXi SLP Use-After-Free Remote Code Execution Vulnerability
2020-10-20 00:00:00
VMware ESXi SLP Use-After-Free Remote Code Execution Vulnerability
2020-11-23 00:00:00
cvelist
cvelist
CVE-2020-3992
2020-10-20 16:11:13
cisa_kev
cisa_kev
VMware ESXi OpenSLP Use-After-Free Vulnerability
2021-11-03 00:00:00
cve
cve
CVE-2020-3992
2020-10-20 17:15:12
checkpoint_advisories
checkpoint_advisories
VMware ESXi Remote Code Execution (CVE-2020-3992)
2021-12-02 00:00:00
nvd
nvd
CVE-2020-3992
2020-10-20 17:15:12
qualysblog
qualysblog
DarkSide Ransomware
2021-06-09 15:00:00
attackerkb
attackerkb
CVE-2020-3992 β ESXi OpenSLP remote code execution vulnerability
2020-10-20 00:00:00
rapid7blog
rapid7blog
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Vmware Horizon Daas
2020-12-01 13:49:26
Exploit for Out-of-bounds Write in Vmware Horizon Daas
2021-02-04 15:15:22
seebug
seebug
ESXi OpenSLPε ζΊ’εΊζΌζ΄οΌCVE-2021-21974οΌ
2021-05-25 00:00:00
ibm
ibm
nessus
nessus
securelist
securelist
Cyberthreats to financial organizations in 2022
2021-11-23 10:00:13
IT threat evolution Q1 2021
2021-05-31 10:00:37
thn
thn
Critical RCE Flaws Affect VMware ESXi and vSphere Client β Patch Now
2021-02-24 07:54:00
vmware
vmware
threatpost
threatpost
VMware Issues Updated Fix For Critical ESXi Flaw
2020-11-04 16:17:20