VMware · vCenter Server
CVE-2024-38812
Heap-overflow vulnerability
ما هي
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
CISA: VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability could allow an attacker with network access to the vCenter Server to execute remote code by sending a specially crafted packet.
ما العمل
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
الموعد النهائي للوكالات الفدرالية الأمريكية: 11 ديسمبر 2024
ثغرات مُستغلّة أخرى من VMware
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 20/11/2024 | Privilege Escalation | vCenter Server | مرتفع 7.5 | 17% |
| 17/07/2024 | Incorrect Default File Permissions Vulnerability | vCenter Server | متوسطة 6.5 | 13% |
| 22/01/2024 | Out-of-Bounds Write | vCenter Server | حرجة 9.8 | 99.2% |
| 10/01/2022 | Improper Access Control | vCenter Server | متوسطة 5.3 | 49% |
| 03/11/2021 | Information Disclosure | vCenter Server | حرجة 9.8 | 90% |
| 03/11/2021 | Remote Code Execution | vCenter Server | حرجة 9.8 | 99.9% |
| 03/11/2021 | Improper Input Validation | vCenter Server | حرجة 9.8 | >99.9% |
| 03/11/2021 | File Upload | vCenter Server | حرجة 9.8 | >99.9% |
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.