CVE-2019-5544
CRITICAL KEV RANSOMWARE NUCLEIVmware Horizon Daas < 9.0.0.0 - Out-of-Bounds Write
Title source: ruleDescription
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
Exploits (2)
nomisec
SCANNER
49 stars
by HynekPetrak · infoleak
https://github.com/HynekPetrak/CVE-2019-5544_CVE-2020-3992
Nuclei Templates (1)
VMware ESXi SLP - Heap Overflow DoS
CRITICALVERIFIEDby riteshs4hu
Shodan:
http.title:"horizon daas"
FOFA:
title="horizon daas"
References (9)
Scores
CVSS v3
9.8
EPSS
0.9248
EPSS Percentile
99.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CISA KEV
2021-11-03
VulnCheck KEV
2020-11-11
InTheWild.io
2021-07-23
ENISA EUVD
EUVD-2019-15119
Ransomware Use
Confirmed
CWE
CWE-787
Status
published
Products (21)
fedoraproject/fedora
30
fedoraproject/fedora
31
openslp/openslp
< 2.0.0
redhat/enterprise_linux_desktop
6.0
redhat/enterprise_linux_desktop
7.0
redhat/enterprise_linux_for_ibm_z_systems
6.0_s390x
redhat/enterprise_linux_for_ibm_z_systems
7.0_s390x
redhat/enterprise_linux_for_ibm_z_systems_eus
7.7_s390x
redhat/enterprise_linux_for_power_big_endian
6.0_ppc64
redhat/enterprise_linux_for_power_big_endian
7.0_ppc64
... and 11 more
Published
Dec 06, 2019
KEV Added
Nov 03, 2021
Tracked Since
Feb 18, 2026