vulnerability
VMSA-2021-0002: OpenSLP heap-overflow vulnerability (CVE-2021-21974)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:A/AC:L/Au:N/C:P/I:P/A:P) | 2021-02-24 | 2021-02-24 | 2025-02-11 |
Severity
6
CVSS
(AV:A/AC:L/Au:N/C:P/I:P/A:P)
Published
2021-02-24
Added
2021-02-24
Modified
2025-02-11
Description
OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflow vulnerability. A malicious actor residing within the same network segment as ESXi who has access to port 427 may be able to trigger the heap-overflow issue in OpenSLP service resulting in remote code execution.
Solution(s)
vmware-esxi65-upgrade-17477841vmware-esxi67-upgrade-17499825vmware-esxi700-upgrade-17325551
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.