5.3

CVE-2022-31698

The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Cloud Foundation Version 3.0
VMware ≫ Cloud Foundation Version 3.0.1
VMware ≫ Cloud Foundation Version 3.0.1.1
VMware ≫ Cloud Foundation Version 3.5
VMware ≫ Cloud Foundation Version 3.5.1
VMware ≫ Cloud Foundation Version 3.7
VMware ≫ Cloud Foundation Version 3.7.1
VMware ≫ Cloud Foundation Version 3.7.2
VMware ≫ Cloud Foundation Version 3.8
VMware ≫ Cloud Foundation Version 3.8.1
VMware ≫ Cloud Foundation Version 3.9
VMware ≫ Cloud Foundation Version 3.9.1
VMware ≫ Cloud Foundation Version 3.10
VMware ≫ Cloud Foundation Version 3.10.1
VMware ≫ Cloud Foundation Version 3.10.1.1
VMware ≫ Cloud Foundation Version 3.10.1.2
VMware ≫ Cloud Foundation Version 3.10.2
VMware ≫ Cloud Foundation Version 3.10.2.1
VMware ≫ Cloud Foundation Version 3.10.2.2
VMware ≫ Cloud Foundation Version 3.11
VMware ≫ Cloud Foundation Version 4.0
VMware ≫ Cloud Foundation Version 4.0.1
VMware ≫ Cloud Foundation Version 4.1
VMware ≫ Cloud Foundation Version 4.1.0.1
VMware ≫ Cloud Foundation Version 4.2
VMware ≫ Cloud Foundation Version 4.2.1
VMware ≫ Cloud Foundation Version 4.3
VMware ≫ Cloud Foundation Version 4.3.1
VMware ≫ Cloud Foundation Version 4.4
VMware ≫ Cloud Foundation Version 4.4.1
VMware ≫ Cloud Foundation Version 4.4.1.1
VMware ≫ vCenter Server Version 6.5 Update -
VMware ≫ vCenter Server Version 6.5 Update a
VMware ≫ vCenter Server Version 6.5 Update b
VMware ≫ vCenter Server Version 6.5 Update c
VMware ≫ vCenter Server Version 6.5 Update d
VMware ≫ vCenter Server Version 6.5 Update e
VMware ≫ vCenter Server Version 6.5 Update f
VMware ≫ vCenter Server Version 6.5 Update update1
VMware ≫ vCenter Server Version 6.5 Update update1b
VMware ≫ vCenter Server Version 6.5 Update update1c
VMware ≫ vCenter Server Version 6.5 Update update1d
VMware ≫ vCenter Server Version 6.5 Update update1e
VMware ≫ vCenter Server Version 6.5 Update update1g
VMware ≫ vCenter Server Version 6.5 Update update2
VMware ≫ vCenter Server Version 6.5 Update update2b
VMware ≫ vCenter Server Version 6.5 Update update2c
VMware ≫ vCenter Server Version 6.5 Update update2d
VMware ≫ vCenter Server Version 6.5 Update update2g
VMware ≫ vCenter Server Version 6.5 Update update3
VMware ≫ vCenter Server Version 6.5 Update update3d
VMware ≫ vCenter Server Version 6.5 Update update3f
VMware ≫ vCenter Server Version 6.5 Update update3k
VMware ≫ vCenter Server Version 6.5 Update update3n
VMware ≫ vCenter Server Version 6.5 Update update3p
VMware ≫ vCenter Server Version 6.5 Update update3q
VMware ≫ vCenter Server Version 6.5 Update update3r
VMware ≫ vCenter Server Version 6.5 Update update3s
VMware ≫ vCenter Server Version 6.5 Update update3t
VMware ≫ vCenter Server Version 6.7 Update -
VMware ≫ vCenter Server Version 6.7 Update a
VMware ≫ vCenter Server Version 6.7 Update b
VMware ≫ vCenter Server Version 6.7 Update d
VMware ≫ vCenter Server Version 6.7 Update update_3o
VMware ≫ vCenter Server Version 6.7 Update update1
VMware ≫ vCenter Server Version 6.7 Update update1b
VMware ≫ vCenter Server Version 6.7 Update update2
VMware ≫ vCenter Server Version 6.7 Update update2a
VMware ≫ vCenter Server Version 6.7 Update update2c
VMware ≫ vCenter Server Version 6.7 Update update3
VMware ≫ vCenter Server Version 6.7 Update update3a
VMware ≫ vCenter Server Version 6.7 Update update3b
VMware ≫ vCenter Server Version 6.7 Update update3f
VMware ≫ vCenter Server Version 6.7 Update update3g
VMware ≫ vCenter Server Version 6.7 Update update3j
VMware ≫ vCenter Server Version 6.7 Update update3l
VMware ≫ vCenter Server Version 6.7 Update update3m
VMware ≫ vCenter Server Version 6.7 Update update3n
VMware ≫ vCenter Server Version 6.7 Update update3o
VMware ≫ vCenter Server Version 6.7 Update update3p
VMware ≫ vCenter Server Version 6.7 Update update3q
VMware ≫ vCenter Server Version 6.7 Update update3r
VMware ≫ vCenter Server Version 7.0 Update -
VMware ≫ vCenter Server Version 7.0 Update a
VMware ≫ vCenter Server Version 7.0 Update b
VMware ≫ vCenter Server Version 7.0 Update c
VMware ≫ vCenter Server Version 7.0 Update d
VMware ≫ vCenter Server Version 7.0 Update update1
VMware ≫ vCenter Server Version 7.0 Update update1a
VMware ≫ vCenter Server Version 7.0 Update update1c
VMware ≫ vCenter Server Version 7.0 Update update1d
VMware ≫ vCenter Server Version 7.0 Update update2
VMware ≫ vCenter Server Version 7.0 Update update2a
VMware ≫ vCenter Server Version 7.0 Update update2b
VMware ≫ vCenter Server Version 7.0 Update update2c
VMware ≫ vCenter Server Version 7.0 Update update2d
VMware ≫ vCenter Server Version 7.0 Update update3
VMware ≫ vCenter Server Version 7.0 Update update3a
VMware ≫ vCenter Server Version 7.0 Update update3c
VMware ≫ vCenter Server Version 7.0 Update update3d
VMware ≫ vCenter Server Version 7.0 Update update3e
VMware ≫ vCenter Server Version 7.0 Update update3f
VMware ≫ vCenter Server Version 7.0 Update update3g
VMware ≫ vCenter Server Version 7.0 Update update3h
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 47.8% 0.987
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CISA-ADP 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://www.vmware.com/security/advisories/VMSA-2022-0030.html
Vendor Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1588