Evil-DB LogoEvil-DB
← All CVEs

CVE-2020-3992

critical · 9.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2021-11-03Remediation due 2022-05-03

OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.

9.8
CVSS
83.0%
EPSS (exploit prob.)
100th
EPSS percentile
2020-10-20
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416

Affected products

VendorProductAffected versions
vmwarecloud_foundation>= 3.0, < 3.10.1.2
vmwarecloud_foundation>= 4.0, < 4.1.0.1
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5
vmwareesxi6.5

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-3992