6.8

CVE-2024-37086

Warnung
VMware ESXi contains an out-of-bounds read vulnerability. A
 malicious actor with local administrative privileges on a virtual 
machine with an existing snapshot may trigger an out-of-bounds read 
leading to a denial-of-service condition of the host.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Cloud Foundation Version >= 4.0 < 5.2
VMware ≫ ESXi Version 7.0 Update -
VMware ≫ ESXi Version 7.0 Update beta
VMware ≫ ESXi Version 7.0 Update update_1
VMware ≫ ESXi Version 7.0 Update update_1a
VMware ≫ ESXi Version 7.0 Update update_1b
VMware ≫ ESXi Version 7.0 Update update_1c
VMware ≫ ESXi Version 7.0 Update update_1d
VMware ≫ ESXi Version 7.0 Update update_1e
VMware ≫ ESXi Version 7.0 Update update_2
VMware ≫ ESXi Version 7.0 Update update_2a
VMware ≫ ESXi Version 7.0 Update update_2c
VMware ≫ ESXi Version 7.0 Update update_2d
VMware ≫ ESXi Version 7.0 Update update_2e
VMware ≫ ESXi Version 7.0 Update update_3
VMware ≫ ESXi Version 7.0 Update update_3c
VMware ≫ ESXi Version 7.0 Update update_3d
VMware ≫ ESXi Version 7.0 Update update_3e
VMware ≫ ESXi Version 7.0 Update update_3f
VMware ≫ ESXi Version 7.0 Update update_3g
VMware ≫ ESXi Version 7.0 Update update_3i
VMware ≫ ESXi Version 7.0 Update update_3j
VMware ≫ ESXi Version 7.0 Update update_3k
VMware ≫ ESXi Version 7.0 Update update_3l
VMware ≫ ESXi Version 7.0 Update update_3m
VMware ≫ ESXi Version 7.0 Update update_3n
VMware ≫ ESXi Version 7.0 Update update_3o
VMware ≫ ESXi Version 7.0 Update update_3p
VMware ≫ ESXi Version 8.0 Update -
VMware ≫ ESXi Version 8.0 Update a
VMware ≫ ESXi Version 8.0 Update b
VMware ≫ ESXi Version 8.0 Update c
VMware ≫ ESXi Version 8.0 Update d
VMware ≫ ESXi Version 8.0 Update e
VMware ≫ ESXi Version 8.0 Update update_1
VMware ≫ ESXi Version 8.0 Update update_1a
VMware ≫ ESXi Version 8.0 Update update_1c
VMware ≫ ESXi Version 8.0 Update update_1d
VMware ≫ ESXi Version 8.0 Update update_2
VMware ≫ ESXi Version 8.0 Update update_2b
VMware ≫ ESXi Version 8.0 Update update_2c
VMware ≫ ESXi Version 8.0 Update update_2d
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.091
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
VMware 6.8 2.5 4.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505
Vendor Advisory