CVE-2024-22254
EUVD-2024-1982305.03.2024, 18:15
VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| vmware | cloud_foundation | 4.0 ≤ 𝑥 ≤ 5.0 |
| vmware | esxi | 7.0 |
| vmware | esxi | 7.0:update_1 |
| vmware | esxi | 7.0:update_1a |
| vmware | esxi | 7.0:update_1b |
| vmware | esxi | 7.0:update_1c |
| vmware | esxi | 7.0:update_1d |
| vmware | esxi | 7.0:update_1e |
| vmware | esxi | 7.0:update_2 |
| vmware | esxi | 7.0:update_2a |
| vmware | esxi | 7.0:update_2c |
| vmware | esxi | 7.0:update_2d |
| vmware | esxi | 7.0:update_2e |
| vmware | esxi | 7.0:update_3 |
| vmware | esxi | 7.0:update_3c |
| vmware | esxi | 7.0:update_3d |
| vmware | esxi | 7.0:update_3e |
| vmware | esxi | 7.0:update_3f |
| vmware | esxi | 7.0:update_3g |
| vmware | esxi | 7.0:update_3i |
| vmware | esxi | 7.0:update_3j |
| vmware | esxi | 7.0:update_3k |
| vmware | esxi | 7.0:update_3l |
| vmware | esxi | 7.0:update_3m |
| vmware | esxi | 7.0:update_3n |
| vmware | esxi | 7.0:update_3o |
| vmware | esxi | 7.0.0:b |
| vmware | esxi | 8.0 |
| vmware | esxi | 8.0:a |
| vmware | esxi | 8.0:b |
| vmware | esxi | 8.0:c |
| vmware | esxi | 8.0:update_1 |
| vmware | esxi | 8.0:update_1a |
| vmware | esxi | 8.0:update_1c |
| vmware | esxi | 8.0:update_2 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| vmware | vmware_esxi | 8.0 ≤ 𝑥 < ESXi80U2sb-23305545 | ADP |
| vmware | vmware_esxi | 8.0 ≤ 𝑥 < ESXi80U1d-23299997 | ADP |
| vmware | vmware_esxi | 7.0 ≤ 𝑥 < ESXi70U3p-23307199 | ADP |
Common Weakness Enumeration