PT-2019-5512 · Openslp +5 · Openslp +6

🗓️ 05 Dec 2019 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

OpenSLP heap overwrite in VMware Horizon service used by ESXi; could affect confidentiality, integrity, and availability.

Reporter	Title	Published	Views	Family All 221
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerability in OpenSLP (CVE-2017-17833)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module (IMM) is affected by vulnerability in OpenSLP (CVE-2017-17833)	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in OpenSLP affects PowerKVM	17 Dec 201814:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in VMware affect IBM Cloud Pak System	19 Jul 202112:35	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in OpenSLP affects the IBM FlashSystem models V840 and V9000	28 Jun 201916:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru is affected by vulnerability in OpenSLP (CVE-2017-17833)	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSLP affects Power Hardware Management Console (CVE-2019-5544)	22 Sep 202123:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSLP affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( CVE-2017-17833)	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Chassis Management Module (CMM) is affected by OpenSLP vulnerability (CVE-2017-17833)	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerability in OpenSLP (CVE-2017-17833)	7 Dec 202322:45	–	ibm

Source	Link
github	www.github.com/dgh05t/VMware_ESXI_OpenSLP_PoCs
github	www.github.com/HynekPetrak/CVE-2019-5544_CVE-2020-3992
osv	www.osv.dev/vulnerability/DLA-2025-1
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA3LYAJ2NRKMOZLZOQNDJ5TNQRFMWGHF
osv	www.osv.dev/vulnerability/MGASA-2020-0075
security-tracker	www.security-tracker.debian.org/tracker/DLA-2025-1
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2019-5544
security-tracker	www.security-tracker.debian.org/tracker/source-package/openslp-dfsg
advisories	www.advisories.mageia.org/MGASA-2020-0075.html
linux	www.linux.oracle.com/errata/ELSA-2019-4240.html

07 Feb 2025 00:00Current

8.7High risk

Vulners AI Score8.7

CVSS 210

CVSS 39.8

CVSS 3.19.8

EPSS0.92128