OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue. A malicious actor with network access to port 427 on ESXi may be able to trigger a heap out-of-bounds read in OpenSLP service resulting in a denial-of-service condition.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Vmsa 2021 0014 | — | Upgrade VMware ESXi 7.0.2 to build number 17630552Upgrade VMware ESXi 6.7 to build number 17700523Upgrade VMware ESXi 7.0.1 to build number 17630552Upgrade VMware ESXi 6.5 to build number 18071574Upgrade VMware ESXi 7.0.0 to build number 17630552 | Sep 12, 2022 | Jul 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub