CVE-2021-21974

Published Feb 24, 2021

Last updated 3 years ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2021-21974 is a heap overflow vulnerability found in the OpenSLP service as used in ESXi versions 7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, and 6.5 before ESXi650-202102101-SG. A malicious actor residing within the same network segment as the ESXi server, who has access to port 427 (TCP and UDP), can trigger this vulnerability by sending crafted packets to the ESXi server. The vulnerability stems from a lack of validation of the length of user-supplied data before copying it to a heap-based buffer. Successful exploitation of this flaw allows the attacker to execute arbitrary code within the context of the SLP daemon on the ESXi server, potentially leading to a virtual machine escape and unauthorized access to the system.

Description
OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflow vulnerability. A malicious actor residing within the same network segment as ESXi who has access to port 427 may be able to trigger the heap-overflow issue in OpenSLP service resulting in remote code execution.
Source
security@vmware.com
NVD status
Analyzed

Risk scores

CVSS 3.1

Type
Primary
Base score
8.8
Impact score
5.9
Exploitability score
2.8
Vector string
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

CVSS 2.0

Type
Primary
Base score
5.8
Impact score
6.4
Exploitability score
6.5
Vector string
AV:A/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov
CWE-787

Social media

Hype score
Not currently trending

Configurations