Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2023-20895

The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigg

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger a memory corruption vulnerability which may bypass authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware VMware vCenter Server (vCenter Server)

Default version status: unaffected

  • 8.0 to < 8.0 U1baffected
  • 7.0 to < 7.0 u3maffected

VMware VMware Cloud Foundation (vCenter Server)

Default version status: unaffected

  • 5.x to < 7.0 U3m, 8.0 U1baffected
  • 4.x to < 7.0 U3m, 8.0 U1baffected

References