CVE-2019-5544
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
Published Dec 6, 2019 · updated Jun 16, 2026 · vmware horizon daas
VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.
Timeline
Detection, updates, and resolution for this record.
Dec 6, 2019 · Catalog
Detected
VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.
Nov 3, 2021 · CISA KEV
Known exploited
Apply updates per vendor instructions.
May 3, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.
Required action
Apply updates per vendor instructions.
CISA due date May 3, 2022
Affected
- cpe fedoraproject/fedora30
- cpe openslp/openslpversion unspecified
- cpe redhat/enterprise linux desktop6.0
- cpe vmware/esxi6.0
- cpe vmware/horizon daasversion unspecified
- vendor VMware VMware ESXi and Horizon DaaSversion unspecified
Sources
- CISA KEVCVE-2019-5544
VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.
cisa.gov - CVE.orgCVE-2019-5544
Official CVE identifier
cve.org - FIRST EPSSCVE-2019-5544
30-day exploitation probability 97.3%
first.org - NIST NVDCVE-2019-5544
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
nvd.nist.gov