Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2024-22273

The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage control

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a virtual machine in conjunction with other issues.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a VMware ESXi

Default version status: unaffected

  • 8.0 to < ESXi80U2sb-23305545affected
  • 7.0 to < ESXi70U3sq-23794019affected

n/a VMware Workstation

Default version status: unaffected

  • 17.x to < 17.5.1affected

n/a VMware Fusion

Default version status: unaffected

  • 13.x to < 13.5.1affected

n/a VMware Cloud Foundation (ESXi)

Default version status: unaffected

  • 5.x to < 5.1.1affected
  • 4.xaffected

References