Description
VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol that allows an attacker to conduct remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| cloud_foundation | vmware / cloud_foundation | >= 4.0, < KB88287 | affected |
| cloud_foundation | vmware / cloud_foundation | >= 5.0, < KB88287 | affected |
| vcenter_server | vmware / vcenter_server | >= 7.0, < 7.0U3o | affected |
| vcenter_server | vmware / vcenter_server | >= 8.0, < 8.0U2 | affected |
| VMware Cloud Foundation (VMware vCenter Server) | VMware / VMware Cloud Foundation (VMware vCenter Server) | 4.x | affected |
| VMware Cloud Foundation (VMware vCenter Server) | VMware / VMware Cloud Foundation (VMware vCenter Server) | 5.x | affected |
| VMware vCenter Server | VMware / VMware vCenter Server | >= 7.0, < 7.0U3o | affected |
| VMware vCenter Server | VMware / VMware vCenter Server | >= 8.0, < 8.0U2 | affected |