3.3
CVE-2022-31699
- EPSS 0.33%
- Veröffentlicht 13.12.2022 16:15:19
- Zuletzt bearbeitet 22.04.2025 16:15:29
- Quelle security@vmware.com
- Teams Watchlist Login
- Unerledigt Login
VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Cloud Foundation Version3.0 Update-
VMware ≫ Cloud Foundation Version3.0.1
VMware ≫ Cloud Foundation Version3.0.1.1
VMware ≫ Cloud Foundation Version3.5
VMware ≫ Cloud Foundation Version3.5.1
VMware ≫ Cloud Foundation Version3.7
VMware ≫ Cloud Foundation Version3.7.1
VMware ≫ Cloud Foundation Version3.7.2
VMware ≫ Cloud Foundation Version3.8
VMware ≫ Cloud Foundation Version3.8.1
VMware ≫ Cloud Foundation Version3.9
VMware ≫ Cloud Foundation Version3.9.1
VMware ≫ Cloud Foundation Version3.10
VMware ≫ Cloud Foundation Version3.10.1
VMware ≫ Cloud Foundation Version3.10.1.1
VMware ≫ Cloud Foundation Version3.10.1.2
VMware ≫ Cloud Foundation Version3.10.2.1
VMware ≫ Cloud Foundation Version3.10.2.2
VMware ≫ Cloud Foundation Version3.11
VMware ≫ Cloud Foundation Version4.0 Update-
VMware ≫ Cloud Foundation Version4.0.1
VMware ≫ Cloud Foundation Version4.1
VMware ≫ Cloud Foundation Version4.1.0.1
VMware ≫ Cloud Foundation Version4.2
VMware ≫ Cloud Foundation Version4.2.1
VMware ≫ Cloud Foundation Version4.3
VMware ≫ Cloud Foundation Version4.3.1
VMware ≫ Cloud Foundation Version4.4
VMware ≫ Cloud Foundation Version4.4.1
VMware ≫ Cloud Foundation Version4.4.1.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Typ | Quelle | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.33% | 0.551 |
Quelle | Base Score | Exploit Score | Impact Score | Vector String |
---|---|---|---|---|
nvd@nist.gov | 3.3 | 1.8 | 1.4 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
134c704f-9b21-4f2e-91b3-4a467353bcc0 | 3.3 | 1.8 | 1.4 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.