CVE-2019-5544 PoC — VMware ESXi和VMware Horizon DaaS OpenSLP 缓冲区错误漏洞

Source

https://github.com/dgh05t/VMware_ESXI_OpenSLP_PoCs

Associated Vulnerability

Title: VMware ESXi和VMware Horizon DaaS OpenSLP 缓冲区错误漏洞 (CVE-2019-5544)
Description:OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.

Description

CVE-2020-3992 & CVE-2019-5544

Readme

# VMware_ESXI_OpenSLP_PoCs
CVE-2020-3992 &amp; CVE-2019-5544

Tested on ESXI installed on VMware Workstation.
If on real mechine, you may need to change the srvtype field (service:VMwareInfrastructure).

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →