{"id":"CVE-2020-3992","aliases":[],"url":"https://o3.security/vulnerability/CVE-2020-3992","summary":"OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing…","details":"OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.","published":"2020-10-20T16:11:13.000Z","modified":"2026-08-12T03:55:48.321Z","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.83015,"percentile":0.99652,"asOf":"2026-09-08"},"cisaKev":null,"exploitsKnown":5,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://www.vmware.com/security/advisories/VMSA-2020-0023.html"},{"type":"WEB","url":"https://www.zerodayinitiative.com/advisories/ZDI-20-1377/"},{"type":"WEB","url":"https://www.zerodayinitiative.com/advisories/ZDI-20-1385/"},{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3992"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-08-12T03:55:48.321Z"}}