Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2023-20894

The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may tr

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bound write by sending a specially crafted packet leading to memory corruption.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware VMware vCenter Server (vCenter Server)

Default version status: unaffected

  • 8.0 to < 8.0 U1baffected
  • 7.0 to < 7.0 u3maffected

VMware VMware Cloud Foundation (vCenter Server)

Default version status: unaffected

  • 5.x to < 7.0 U3m, 8.0 U1baffected
  • 4.x to < 7.0 U3m, 8.0 U1baffected

References