Description
Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could allow a malicious actor with network access to vCenter Server to send specially crafted network packets, potentially leading to remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| VMware Cloud Foundation | n/a / VMware Cloud Foundation | 4.x | affected |
| VMware Cloud Foundation | n/a / VMware Cloud Foundation | 5.x | affected |
| VMware vCenter Server | n/a / VMware vCenter Server | >= 7.0, < 7.0 U3r | affected |
| VMware vCenter Server | n/a / VMware vCenter Server | >= 8.0, < 8.0 U2d | affected |
| VMware vCenter Server | n/a / VMware vCenter Server | >= 8.0, < 8.0 U1e | affected |