Unrated severityCISA KEVNVD Advisory· Published Dec 6, 2019· Updated Oct 21, 2025
CVE-2019-5544
CVE-2019-5544
Description
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
Affected products
1- OpenSLP/OpenSLPdescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- access.redhat.com/errata/RHSA-2019:4240mitrevendor-advisoryx_refsource_REDHAT
- access.redhat.com/errata/RHSA-2020:0199mitrevendor-advisoryx_refsource_REDHAT
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA3LYAJ2NRKMOZLZOQNDJ5TNQRFMWGHF/mitrevendor-advisoryx_refsource_FEDORA
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPXXJZLPLAQULBCJVI5NNWZ3PGWXGXWG/mitrevendor-advisoryx_refsource_FEDORA
- security.gentoo.org/glsa/202005-12mitrevendor-advisoryx_refsource_GENTOO
- www.openwall.com/lists/oss-security/2019/12/10/2mitremailing-listx_refsource_MLIST
- www.openwall.com/lists/oss-security/2019/12/11/2mitremailing-listx_refsource_MLIST
- www.vmware.com/security/advisories/VMSA-2019-0022.htmlmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.