VULNERABILITY INTELLIGENCE

CVE-2019-5544

CVSS score9.8 CRITICAL
EPSS probability98.13%
CISA KEVKnown exploited vulnerability
Published2019-12-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

Vendor / product: VMware / VMware ESXi and Horizon DaaS

Description

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references