Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-5544: OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8. 1777788: CVE-2019-5544 openslp: Heap-based buffer overflow in ProcessSrvRqst() in slpd_process.c leading to remote code execution
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | openslp | 1:2.0.0-8.amzn2 |
| Amazon Linux · 2 | openslp-debuginfo | 1:2.0.0-8.amzn2 |
| Amazon Linux · 2 | openslp-devel | 1:2.0.0-8.amzn2 |
| Amazon Linux · 2 | openslp-server | 1:2.0.0-8.amzn2 |
Vulnerabilities 1
-
Critical 9.8
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity o…
KEV Nov 3, 2021
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-5544.html