OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.

🗓️ 19 Jan 2022 08:00:00Reported by MicrosoftType

OpenSLP heap overwrite in ESXi and Horizon DaaS rated critical with CVSSv3 up to 9.8.

Reporter	Title	Published	Views	Family All 97
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSLP affects Power Hardware Management Console (CVE-2019-5544)	22 Sep 202123:38	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSLP vulnerability affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	29 Mar 202301:48	–	ibm
ATTACKERKB	CVE-2019-5544 — ESXi OpenSLP remote code execution vulnerability	6 Dec 201900:00	–	attackerkb
ATTACKERKB	CVE-2020-3992 — ESXi OpenSLP remote code execution vulnerability	20 Oct 202000:00	–	attackerkb
Tenable Nessus	Amazon Linux 2 : openslp (ALAS-2019-1378)	19 Dec 201900:00	–	nessus
Tenable Nessus	CentOS 7 : openslp (CESA-2019:4240)	27 Dec 201900:00	–	nessus
Tenable Nessus	CentOS 6 : openslp (RHSA-2020:0199)	30 Jan 202000:00	–	nessus
Tenable Nessus	Debian DLA-2025-1 : openslp-dfsg security update	9 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : openslp (EulerOS-SA-2020-1038)	2 Jan 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : openslp (EulerOS-SA-2020-1120)	24 Feb 202000:00	–	nessus