[Openslp-devel] VMware ESXi servers are massively hacked worldwide due to heap-based buffer overflow in OpenSLP

[Turritopsis D. T. En M. <tdt...@gm...>]

Subject: VMware ESXi servers are massively hacked worldwide due to
heap-based buffer overflow in OpenSLP

Good day from Singapore,

I am sharing this article for more awareness.

Article: Hackers are mass infecting servers worldwide by exploiting a
patched hole
Link: https://arstechnica.com/information-technology/2023/02/hackers-are-mass-infecting-servers-worldwide-by-exploiting-a-patched-hole/

[QUOTE]

The vulnerability being exploited to infect the servers is
CVE-2021-21974, which stems from a heap-based buffer overflow in
OpenSLP, an open network-discovery standard that’s incorporated into
ESXi. When VMware patched the vulnerability in February 2021, the
company warned it could be exploited by a malicious actor with access
to the same network segment over port 427. The vulnerability had a
severity rating of 8.8 out of a possible 10. Proof-of-concept exploit
code and instructions for using it became available a few months
later.

[/QUOTE]

Thank you.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
Blogs:
https://tdtemcerts.blogspot.com
https://tdtemcerts.wordpress.com