CVE-2019-5544criticalunder attackransomwareCWE-787

CVE-2019-5544: critical vulnerability in ESXi and Horizon DaaS

Published · Updated

Follow this CVE+ Monitor ESXi+ Monitor Horizon DaaS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 98%
from disclosure to weapon361 days
Published on NVDDec 6
1st PoC+361d
CISA KEV+698d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
16 products (392 components)
Red Hat Enterprise Linux Client (v. 7) · Red Hat Enterprise Linux Client Optional (v. 7) · Red Hat Enterprise Linux ComputeNode (v. 7) · Red Hat Enterprise Linux ComputeNode Optional (v. 7) · Red Hat Enterprise Linux Server (v. 7) · and others 11
fix ↗
Not affected
2 products (5 components) — because the vulnerable code is not present in the product
Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 8
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

OpenSLP software used in ESXi and Horizon DaaS appliances has a flaw that allows attackers to overwrite memory on the heap, potentially taking complete control of the system. This is critical because it can lead to unauthorized access and data theft.

Technical detail

A heap buffer overflow in OpenSLP (CWE-787) allows remote attackers to overwrite adjacent heap memory without authentication. The vulnerability enables arbitrary code execution with the privileges of the affected service, impacting confidentiality, integrity, and availability of ESXi and Horizon DaaS systems.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · ESXi and Horizon DaaS
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.