Description
VMware ESXi and Workstation contain a time-of-check time-of-use (TOCTOU) race condition vulnerability that leads to an out-of-bounds write. Successful exploitation enables an attacker with local administrative privileges on a virtual machine to execute code as the virtual machine's VMX process running on the host.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| ESXi | VMware / ESXi | >= 7.0, < ESXi70U3s-24585291 | affected |
| ESXi | VMware / ESXi | >= 8.0, < ESXi80U2d-24585300 | affected |
| ESXi | VMware / ESXi | >= 8.0, < ESXi80U3d-24585383 | affected |
| Telco Cloud Infrastructure | VMware / Telco Cloud Infrastructure | 3.x, 2.x | affected |
| Telco Cloud Platform | VMware / Telco Cloud Platform | 5.x, 4.x, 3.x, 2.x | affected |
| VMware Cloud Foundation | VMware / VMware Cloud Foundation | 5.x, 4.5.x | affected |
| Workstation | VMware / Workstation | >= 17.x, < 17.6.3 | affected |