CVE-2020-3992: VMWARE ESXI Remote Code Execution Vulnerability Alert

On October 20, VMware issued a security notice to fix a VMware ESXi remote code execution vulnerability (CVE-2020-3992). The vulnerability comes from the “use-after-free” reuse problem of OpenSLP used in ESXi. The vulnerability comes from the “use-after-free” reuse problem of OpenSLP used in ESXi. The user-after-free of the OpenSLP service can be triggered by accessing port 427 of the ESXi host. The CVSS score is 9.8.

At present, Vmware has fixed the vulnerability in the latest version, please upgrade the version as soon as possible to protect the affected users, the download link and document of the corresponding product version are as follows: