CVE-2024-38812
17.09.2024, 18:15
ThevCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol.A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.Enginsight
| Vendor | Product | Version |
|---|---|---|
| vmware | vcenter_server | 7.0 |
| vmware | vcenter_server | 7.0:update1 |
| vmware | vcenter_server | 7.0:update1a |
| vmware | vcenter_server | 7.0:update1c |
| vmware | vcenter_server | 7.0:update1d |
| vmware | vcenter_server | 7.0:update2 |
| vmware | vcenter_server | 7.0:update2a |
| vmware | vcenter_server | 7.0:update2b |
| vmware | vcenter_server | 7.0:update2c |
| vmware | vcenter_server | 7.0:update2d |
| vmware | vcenter_server | 7.0:update3 |
| vmware | vcenter_server | 7.0:update3a |
| vmware | vcenter_server | 7.0:update3c |
| vmware | vcenter_server | 7.0:update3d |
| vmware | vcenter_server | 7.0:update3e |
| vmware | vcenter_server | 7.0:update3f |
| vmware | vcenter_server | 7.0:update3g |
| vmware | vcenter_server | 7.0:update3h |
| vmware | vcenter_server | 7.0:update3i |
| vmware | vcenter_server | 7.0:update3j |
| vmware | vcenter_server | 7.0:update3k |
| vmware | vcenter_server | 7.0:update3l |
| vmware | vcenter_server | 7.0:update3m |
| vmware | vcenter_server | 7.0:update3n |
| vmware | vcenter_server | 8.0 |
| vmware | vcenter_server | 8.0:update1 |
| vmware | vcenter_server | 8.0:update1a |
| vmware | vcenter_server | 8.0:update1b |
| vmware | vcenter_server | 8.0:update1c |
| vmware | vcenter_server | 8.0:update1d |
| vmware | vcenter_server | 8.0:update1e |
| vmware | vcenter_server | 8.0:update2 |
| vmware | vcenter_server | 8.0:update2a |
| vmware | vcenter_server | 8.0:update2b |
| vmware | vcenter_server | 8.0:update2c |
| vmware | vcenter_server | 8.0:update2d |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-122 - Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.