IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
9.8Kritik KEV Fidye yazılımında kullanılıyor

CVE-2019-5544VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

ESXi and Horizon DaaS Yayım: (6 yıl önce)

Aktif olarak istismar ediliyor — VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 03.11.2021 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 03.05.2022.

Gerekli işlem: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2019-5544

Açıklama

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.

Zayıflık türü (CWE): CWE-787

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
fedoraproject fedora 30
openslp openslp ≤ 2.0.0
redhat enterprise linux desktop 6.0
redhat enterprise linux for ibm z systems 6.0_s390x
redhat enterprise linux for ibm z systems eus 7.7_s390x
redhat enterprise linux for power big endian 6.0_ppc64
redhat enterprise linux for power big endian eus 7.7_ppc64
redhat enterprise linux for power little endian 7.0_ppc64le
redhat enterprise linux for power little endian eus 7.7_ppc64le
redhat enterprise linux server 6.0
redhat enterprise linux server aus 7.7
redhat enterprise linux server eus 7.7
redhat enterprise linux server tus 7.7
redhat enterprise linux workstation 6.0
— ESXi and Horizon DaaS ESXi 6.7 prior to patch release ESXi670-201912001, ESXi 6.5 prior to patch release ESXi650-201912001, ESXi 6.0 prior to patch release ESXi600-201912001 and Horizon DaaS 8.x prior to BZ-2467224-Disable_SLPD_service_permanently_801_Hotfix.
vmware esxi 6.0
vmware horizon daas 8.0.0 – < 9.0.0.0

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (60)
  • cpe:2.3:a:vmware:horizon_daas:*:*:*:*:*:*:*:* ≥ 8.0.0 < 9.0.0.0
  • cpe:2.3:o:vmware:esxi:6.0:-:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:1:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:1a:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:1b:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:2:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:3:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:3a:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201504401:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201505401:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201507101:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201507102:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201507401:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201507402:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201507403:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201507404:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201507405:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201507406:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201507407:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201509101:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201509102:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201509201:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201509202:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201509203:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201509204:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201509205:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201509206:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201509207:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201509208:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201509209:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201509210:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201510401:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201511401:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201601101:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201601102:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201601401:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201601402:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201601403:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201601404:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201601405:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201602401:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201603101:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201603102:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201603201:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201603202:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201603203:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201603204:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201603205:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201603206:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201603207:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201603208:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201605401:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201608101:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201608401:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201608402:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201608403:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201608404:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201608405:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201610410:*:*:*:*:*:*
  • cpe:2.3:o:vmware:esxi:6.0:600-201611401:*:*:*:*:*:*

Aynı üründe son açıklar — Red Hat Enterprise Linux

7.5Yüksek
CVE-2026-123151

Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potentially allow the target to execute arbitr…

8.1Yüksek
CVE-2026-121997

Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actua…

8.2Yüksek
CVE-2026-121996

Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A length validation flaw in gdbserver's agent-expression parser allows an unauthenticated remote attacker to read uninitialized heap memory from the gdbserver process and cause a denial of service. Disclosed heap content includes addresses suitable for defeat…

7.5Yüksek
CVE-2026-121995

Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory automatically during connection setup. The overflow results from GDB reading beyond the current reply boundary into a stale …

8.8Yüksek
CVE-2026-121994

Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-controlled debug target to execute arbitrary code in the GDB process. The vulnerability exists in fetch_register_using_p, which decodes a stub's register reply into an allo…

6.5Orta
CVE-2026-121259

Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in the GStreamer JPEG 2000 decimator in gst-plugins-bad. Crafted JPEG 2000 media can cause integer overflows or division by zero during tile processing. An application that processes the malicious media may crash, resulting in a denial of service.