CVE-2023-20896
22.06.2023, 13:15
The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol.A malicious actor with network access to vCenter Server may trigger an out-of-bounds read by sending a specially crafted packet leading to denial-of-service of certain services (vmcad, vmdird, and vmafdd).Enginsight
| Vendor | Product | Version |
|---|---|---|
| vmware | vcenter_server | 4.0 ≤ 𝑥 < 7.0 |
| vmware | vcenter_server | 7.0 |
| vmware | vcenter_server | 7.0:a |
| vmware | vcenter_server | 7.0:b |
| vmware | vcenter_server | 7.0:c |
| vmware | vcenter_server | 7.0:d |
| vmware | vcenter_server | 7.0:update1 |
| vmware | vcenter_server | 7.0:update1a |
| vmware | vcenter_server | 7.0:update1c |
| vmware | vcenter_server | 7.0:update1d |
| vmware | vcenter_server | 7.0:update2 |
| vmware | vcenter_server | 7.0:update2a |
| vmware | vcenter_server | 7.0:update2b |
| vmware | vcenter_server | 7.0:update2c |
| vmware | vcenter_server | 7.0:update2d |
| vmware | vcenter_server | 7.0:update3 |
| vmware | vcenter_server | 7.0:update3a |
| vmware | vcenter_server | 7.0:update3c |
| vmware | vcenter_server | 7.0:update3d |
| vmware | vcenter_server | 7.0:update3e |
| vmware | vcenter_server | 7.0:update3f |
| vmware | vcenter_server | 7.0:update3g |
| vmware | vcenter_server | 7.0:update3h |
| vmware | vcenter_server | 7.0:update3i |
| vmware | vcenter_server | 7.0:update3j |
| vmware | vcenter_server | 7.0:update3k |
| vmware | vcenter_server | 7.0:update3l |
| vmware | vcenter_server | 8.0 |
| vmware | vcenter_server | 8.0:a |
| vmware | vcenter_server | 8.0:b |
| vmware | vcenter_server | 8.0:c |
| vmware | vcenter_server | 8.0:update1 |
| vmware | vcenter_server | 8.0:update1a |
𝑥
= Vulnerable software versions
Common Weakness Enumeration