CVE-2019-5544
Fixed in a distro release ExploitedEPSS 98%CVSS 9.8
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
Products: VMware Horizon DaaS, vmware esxi, redhat enterprise_linux_desktop, redhat enterprise_linux_for_ibm_z_systems, redhat enterprise_linux_for_ibm_z_systems_eus, redhat enterprise_linux_for_power_big_endian, redhat enterprise_linux_for_power_big_endian_eus, redhat enterprise_linux_for_power_little_endian, redhat enterprise_linux_for_power_little_endian_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, openslp, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | openslp | 1:2.0.0-8.amzn2 |
| Amazon Linux 2 | openslp-devel | 1:2.0.0-8.amzn2 |
| Amazon Linux 2 | openslp-server | 1:2.0.0-8.amzn2 |
| Debian 8 | openslp-dfsg | 1.2.1-10+deb8u2 |
| Red Hat Enterprise Linux 6 | openslp | 1:2.0.0-4.el6_10 |
| Red Hat Enterprise Linux 6 | openslp-debuginfo | 1:2.0.0-4.el6_10 |
| Red Hat Enterprise Linux 6 | openslp-devel | 1:2.0.0-4.el6_10 |
| Red Hat Enterprise Linux 6 | openslp-server | 1:2.0.0-4.el6_10 |
| Red Hat Enterprise Linux 7 | openslp | 1:2.0.0-8.el7_7 |
| Red Hat Enterprise Linux 7 | openslp-debuginfo | 1:2.0.0-8.el7_7 |
| Red Hat Enterprise Linux 7 | openslp-devel | 1:2.0.0-8.el7_7 |
| Red Hat Enterprise Linux 7 | openslp-server | 1:2.0.0-8.el7_7 |
| Ubuntu 16.04 LTS | openslp-dfsg | 1.2.1-11ubuntu0.16.04.2 |
| Ubuntu Pro 14.04 LTS | openslp-dfsg | 1.2.1-9ubuntu0.3+esm1 |