Lucene search
Lucas Leong (@_wmliang_) of Trend Micro's Zero Day InitiativeZDI-20-1377HistoryNov 23, 2020 - 12:00 a.m.
VMware ESXi SLP Use-After-Free Remote Code Execution Vulnerability
2020-11-2300:00:00
Lucas Leong (@_wmliang_) of Trend Micro's Zero Day Initiative
www.zerodayinitiative.com
107
0.356 Low
EPSS
Percentile
97.2%
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of VMware ESXi. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SLP messages. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the SLP daemon.
Related
cvelist
cvelist
CVE-2020-3992
2020-10-20 16:11:13
zdi
zdi
VMware ESXi SLP Use-After-Free Privilege Escalation Vulnerability
2020-11-25 00:00:00
VMware ESXi SLP Use-After-Free Remote Code Execution Vulnerability
2020-10-20 00:00:00
cisa_kev
cisa_kev
VMware ESXi OpenSLP Use-After-Free Vulnerability
2021-11-03 00:00:00
cve
cve
CVE-2020-3992
2020-10-20 17:15:12
checkpoint_advisories
checkpoint_advisories
VMware ESXi Remote Code Execution (CVE-2020-3992)
2021-12-02 00:00:00
prion
prion
Design/Logic Flaw
2020-10-20 17:15:00
nvd
nvd
CVE-2020-3992
2020-10-20 17:15:12
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Vmware Horizon Daas
2021-02-04 15:15:22
Exploit for Out-of-bounds Write in Vmware Horizon Daas
2020-12-01 13:49:26
qualysblog
qualysblog
DarkSide Ransomware
2021-06-09 15:00:00
attackerkb
attackerkb
CVE-2020-3992 β ESXi OpenSLP remote code execution vulnerability
2020-10-20 00:00:00
rapid7blog
rapid7blog
seebug
seebug
ESXi OpenSLPε ζΊ’εΊζΌζ΄οΌCVE-2021-21974οΌ
2021-05-25 00:00:00
ibm
ibm
nessus
nessus
vmware
vmware
securelist
securelist
Cyberthreats to financial organizations in 2022
2021-11-23 10:00:13
IT threat evolution Q1 2021
2021-05-31 10:00:37
thn
thn
Critical RCE Flaws Affect VMware ESXi and vSphere Client β Patch Now
2021-02-24 07:54:00
threatpost
threatpost
VMware Issues Updated Fix For Critical ESXi Flaw
2020-11-04 16:17:20