Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-34048

VMware vCenter Server Out-of-Bounds Write Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware VMware vCenter Server

Default version status: unaffected

  • 8.0 to < 8.0U2affected
  • 7.0 to < 7.0U3oaffected

VMware VMware Cloud Foundation (VMware vCenter Server)

Default version status: unaffected

  • 5.xaffected
  • 4.xaffected

References