CVE-2023-20896: The VMware vCenter Server contains an out-of-bounds read vulnerability in t

The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may tri

Status

Published

2023-06-22

Updated

2025-02-13

Assigning organization

vmware

Description

The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds read by sending a specially crafted packet leading to denial-of-service of certain services (vmcad, vmdird, and vmafdd).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware VMware vCenter Server (vCenter Server)

Default version status: unaffected

8.0 to < 8.0 U1baffected
7.0 to < 7.0 u3maffected

VMware VMware Cloud Foundation (vCenter Server)