by Kastro
Paper/Archive/CVE-2024-38812

CVE-2024-38812

broadcom vmware_vcenter_server — Heap-overflow vulnerability

KEV · due 11 DecEPSS 55%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (CNA)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 99.0.990 × 2019.8Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

Affected

ProductAffectedFixed inSource
VMware vCenter Server8.0 – < 8.0 U3b8.0 U3bCNA
VMware vCenter Server7.0 – < 7.0 U3s7.0 U3sCNA
VMware Cloud Foundation5.x–CNA
VMware Cloud Foundation4.x–CNA
vmware_vcenter_server8.00 – < 8.0u3b8.0u3bCISA-ADP
vmware_vcenter_server7.0 – < 7.0u3s7.0u3sCISA-ADP
vmware_vcenter_server8.00 – < 8.0u3b8.0u3bCISA-ADP
vmware_vcenter_server7.0 – < 7.0u3s7.0u3sCISA-ADP
vmware_cloud_foundation4.0 – < 5.05.0CISA-ADP
vmware_cloud_foundation5.0 – < 6.06.0CISA-ADP
vmware_cloud_foundation4.0 – < 5.05.0CISA-ADP
vmware_cloud_foundation5.0 – < 6.06.0CISA-ADP

Scores by source

vmware (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refsupport.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38812kevcisa.gov/known-exploited-vulnerabilities-catalog