Critical 1 exploited CVE ELSA-2019-4240 1 CVE

Critical: openslp security update (Oracle Linux 7)

Published Dec 16, 2019 · Updated Dec 16, 2019

Ecosystem: Oracle Linux

Summary

[1:2.0.0-8]
- Fix a heap-based buffer overflow vulnerability leading to
remote code execution, CVE-2019-5544
Resolves: #1781701

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	openslp	1:2.0.0-8.el7_7
Oracle Linux · 7	openslp-devel	1:2.0.0-8.el7_7
Oracle Linux · 7	openslp-server	1:2.0.0-8.el7_7

Vulnerabilities 1

Critical 9.8

CVE-2019-5544 Exploited · Ransomware Public exploit Scanner template EPSS 98%

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity o…

openslp-dfsg openslp Virtualization Ubuntu Azure Linux

Dec 6, 2019
KEV Nov 3, 2021