Description
VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability could allow an attacker with network access to the vCenter Server to execute remote code by sending a specially crafted packet.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| vmware_cloud_foundation | broadcom / vmware_cloud_foundation | >= 4.0, < 5.0 | affected |
| vmware_cloud_foundation | broadcom / vmware_cloud_foundation | >= 4.0, < 5.0 | affected |
| vmware_cloud_foundation | broadcom / vmware_cloud_foundation | >= 5.0, < 6.0 | affected |
| vmware_cloud_foundation | broadcom / vmware_cloud_foundation | >= 5.0, < 6.0 | affected |
| VMware Cloud Foundation | n/a / VMware Cloud Foundation | 4.x | affected |
| VMware Cloud Foundation | n/a / VMware Cloud Foundation | 5.x | affected |
| vmware_vcenter_server | broadcom / vmware_vcenter_server | >= 7.0, < 7.0u3s | affected |
| vmware_vcenter_server | broadcom / vmware_vcenter_server | >= 7.0, < 7.0u3s | affected |
| vmware_vcenter_server | broadcom / vmware_vcenter_server | >= 8.00, < 8.0u3b | affected |
| vmware_vcenter_server | broadcom / vmware_vcenter_server | >= 8.00, < 8.0u3b | affected |
| VMware vCenter Server | n/a / VMware vCenter Server | >= 7.0, < 7.0 U3s | affected |
| VMware vCenter Server | n/a / VMware vCenter Server | >= 8.0, < 8.0 U3b | affected |