VMware · VMware ESXi and Horizon DaaS
CVE-2019-5544
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
Qué es
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
CISA: VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.
Qué hacer
Apply updates per vendor instructions.
Plazo para las agencias federales de EE. UU.: 3 de mayo de 2022
- Añadida a la lista de CISA
- 3 de noviembre de 2021
- Publicada
- 6 de diciembre de 2019
- Gravedad
- Crítica 9,8 CVSS 3.1
- Probabilidad de ataques en los próximos 30 días (EPSS)
- 98% entre el 0,1% superior de todas las vulnerabilidades conocidas
- Debilidad
- CWE-787
- Más detalles
- NVD · CVE.org · CISA
Todas las referencias (8)
- https://access.redhat.com/errata/RHSA-2019:4240
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPXXJZLPLAQU…
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA3LYAJ2NRKM…
- https://access.redhat.com/errata/RHSA-2020:0199
- https://security.gentoo.org/glsa/202005-12
- http://www.vmware.com/security/advisories/VMSA-2019-0022.html
- http://www.openwall.com/lists/oss-security/2019/12/10/2
- http://www.openwall.com/lists/oss-security/2019/12/11/2
Más fallos explotados de VMware
| Añadido | Vulnerabilidad | Producto | Gravedad | Prob. de ataque |
|---|---|---|---|---|
| 4 mar 2025 | TOCTOU Race Condition | ESXi and Workstation | Crítica 9,3 | 1,6% |
| 4 mar 2025 | Arbitrary Write | ESXi | Alto 8,2 | 1,0% |
| 4 mar 2025 | Information Disclosure | ESXi, Workstation, and Fusion | Alto 7,1 | 1,6% |
| 20 nov 2024 | Heap-Based Buffer Overflow | vCenter Server | Crítica 9,8 | 55% |
| 20 nov 2024 | Privilege Escalation | vCenter Server | Alto 7,5 | 17% |
| 30 jul 2024 | Authentication Bypass | ESXi | Media 6,8 | 27% |
| 17 jul 2024 | Incorrect Default File Permissions Vulnerability | vCenter Server | Media 6,5 | 13% |
| 22 ene 2024 | Out-of-Bounds Write | vCenter Server | Crítica 9,8 | 99,2% |
Fuentes: Known Exploited Vulnerabilities (CISA, dominio público), CVE records (cve.org) y EPSS (FIRST). La probabilidad de ataque es la estimación EPSS de que alguien intente explotar el fallo en los próximos 30 días.