7.8

CVE-2024-22273

The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a virtual machine in conjunction with other issues.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Cloud Foundation Version >= 4.0 < 5.1.1
VMware ≫ Workstation Version >= 17.0.0 < 17.5.1
VMware ≫ ESXi Version 7.0 Update -
VMware ≫ ESXi Version 7.0 Update beta
VMware ≫ ESXi Version 7.0 Update update_1
VMware ≫ ESXi Version 7.0 Update update_1a
VMware ≫ ESXi Version 7.0 Update update_1b
VMware ≫ ESXi Version 7.0 Update update_1c
VMware ≫ ESXi Version 7.0 Update update_1d
VMware ≫ ESXi Version 7.0 Update update_1e
VMware ≫ ESXi Version 7.0 Update update_2
VMware ≫ ESXi Version 7.0 Update update_2a
VMware ≫ ESXi Version 7.0 Update update_2c
VMware ≫ ESXi Version 7.0 Update update_2d
VMware ≫ ESXi Version 7.0 Update update_2e
VMware ≫ ESXi Version 7.0 Update update_3
VMware ≫ ESXi Version 7.0 Update update_3c
VMware ≫ ESXi Version 7.0 Update update_3d
VMware ≫ ESXi Version 7.0 Update update_3e
VMware ≫ ESXi Version 7.0 Update update_3f
VMware ≫ ESXi Version 7.0 Update update_3g
VMware ≫ ESXi Version 7.0 Update update_3i
VMware ≫ ESXi Version 7.0 Update update_3j
VMware ≫ ESXi Version 7.0 Update update_3k
VMware ≫ ESXi Version 7.0 Update update_3l
VMware ≫ ESXi Version 7.0 Update update_3m
VMware ≫ ESXi Version 7.0 Update update_3n
VMware ≫ ESXi Version 7.0 Update update_3o
VMware ≫ ESXi Version 7.0 Update update_3p
VMware ≫ ESXi Version 8.0 Update -
VMware ≫ ESXi Version 8.0 Update a
VMware ≫ ESXi Version 8.0 Update b
VMware ≫ ESXi Version 8.0 Update c
VMware ≫ ESXi Version 8.0 Update update_1
VMware ≫ ESXi Version 8.0 Update update_1a
VMware ≫ ESXi Version 8.0 Update update_1c
VMware ≫ ESXi Version 8.0 Update update_2
VMware ≫ Fusion Version >= 13.0.0 < 13.5.1
   Apple ≫ macOS Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.061
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
VMware 8.1 1.4 6
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24308
Vendor Advisory