CVE-2010-3609

no score yetEPSS 17%

The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SLPD) in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, allows remote attackers to cause a denial of service (infinite loop) via a packet with a "next extension offset" that references this extension or a previous extension. NOTE: some of these details are obtained from third party information.

EPSS: 17% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2011-03-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

openslp:openslp
vmware:esx
vmware:esxi

References

http://lists.vmware.com/pipermail/security-announce/2011/000126.html
http://secunia.com/advisories/43601
http://secunia.com/advisories/43742
http://securityreason.com/securityalert/8127
http://securitytracker.com/id?1025168

Check your stack JSON