AZL-7321 CVE-2019-5544 affecting package openslp for versions less than 2.0.0-26

🗓️ 06 Dec 2019 16:15:11Reported by GoogleType

osv🔗 osv.dev👁 1 Views

AZL-7321 CVE-2019-5544 affects OpenSLP below 2.0.0-26, causing a heap overwrite in ESXi and Horizon DaaS appliances.

Reporter	Title	Published	Views	Family All 98
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSLP affects Power Hardware Management Console (CVE-2019-5544)	22 Sep 202123:38	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSLP vulnerability affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	29 Mar 202301:48	–	ibm
ATTACKERKB	CVE-2019-5544 — ESXi OpenSLP remote code execution vulnerability	6 Dec 201900:00	–	attackerkb
ATTACKERKB	CVE-2020-3992 — ESXi OpenSLP remote code execution vulnerability	20 Oct 202000:00	–	attackerkb
Tenable Nessus	Amazon Linux 2 : openslp (ALAS-2019-1378)	19 Dec 201900:00	–	nessus
Tenable Nessus	CentOS 7 : openslp (CESA-2019:4240)	27 Dec 201900:00	–	nessus
Tenable Nessus	CentOS 6 : openslp (RHSA-2020:0199)	30 Jan 202000:00	–	nessus
Tenable Nessus	Debian DLA-2025-1 : openslp-dfsg security update	9 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : openslp (EulerOS-SA-2020-1038)	2 Jan 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : openslp (EulerOS-SA-2020-1120)	24 Feb 202000:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-5544

21 Apr 2026 04:33Current

7.2High risk

Vulners AI Score7.2

CVSS 3.19.8

EPSS0.92128