by Kastro
Paper/Archive/CVE-2024-22253

CVE-2024-22253

vmware esxi — Use-after-free vulnerability

EPSS 0.6%CVSS 9.3
critical.is priorityof 100
38
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 50.9.509 × 2010.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.

Affected

ProductAffectedFixed inSource
VMware ESXi8.0 – < ESXi80U2sb-23305545ESXi80U2sb-23305545CNA
VMware ESXi8.0 – < ESXi80U1d-23299997ESXi80U1d-23299997CNA
VMware ESXi7.0 – < ESXi70U3p-23307199ESXi70U3p-23307199CNA
VMware Workstation17.x – < 17.5.117.5.1CNA
VMware Fusion13.x – < 13.5.113.5.1CNA
VMware Cloud Foundation5.x–CNA
VMware Cloud Foundation4.x–CNA
esxi8.0 – < esxi80U2sb-23305545esxi80U2sb-23305545CISA-ADP
esxi8.0 – < esxi80U1d-23299997esxi80U1d-23299997CISA-ADP
esxi7.0 – < esxi70U3p-23307199esxi70U3p-23307199CISA-ADP
vmware_workstation17.0 – < 17.5.117.5.1CISA-ADP
fusion13.0 – < 13.5.113.5.1CISA-ADP

Scores by source

vmware (CNA)9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refvmware.com/security/advisories/VMSA-2024-0006.html