CVE-2021-21995

OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue

published July 13, 2021

CVSS
—
EPSS
1%
Percentile
61.2
In the wild
Unconfirmed
What it is

OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue. A malicious actor with network access to port 427 on ESXi may be able to trigger a heap out-of-bounds read in OpenSLP service resulting in a denial-of-service condition.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00961 · 61.2th percentile
Published
2021-07-13T18:05Z
EPSS history
Timeline
  • 13 JUL 18:05Z
    OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue
    cvelistv5