OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
History

Wed, 22 Oct 2025 00:15:00 +0000


Tue, 21 Oct 2025 20:30:00 +0000


Tue, 21 Oct 2025 19:30:00 +0000


Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.87066}

epss

{'score': 0.85354}


Fri, 07 Feb 2025 14:15:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2021-11-03'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 14 Aug 2024 00:30:00 +0000

Type Values Removed Values Added
References

cve-icon MITRE

Status: PUBLISHED

Assigner: vmware

Published: 2019-12-06T15:54:18.000Z

Updated: 2025-10-21T23:35:56.590Z

Reserved: 2019-01-07T00:00:00.000Z

Link: CVE-2019-5544

cve-icon Vulnrichment

Updated: 2024-08-04T20:01:51.272Z

cve-icon NVD

Status : Modified

Published: 2019-12-06T16:15:11.467

Modified: 2025-10-22T00:16:43.603

Link: CVE-2019-5544

cve-icon Redhat

Severity : Critical

Publid Date: 2019-12-06T00:00:00Z

Links: CVE-2019-5544 - Bugzilla