VMware · vCenter Server
CVE-2024-38812
Heap-overflow vulnerability
Cos'è
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
CISA: VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability could allow an attacker with network access to the vCenter Server to execute remote code by sending a specially crafted packet.
Cosa fare
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Scadenza per le agenzie federali USA: 11 dicembre 2024
Altre falle sfruttate di VMware
| Aggiunto | Vulnerabilità | Prodotto | Gravità | Probabilità di attacco |
|---|---|---|---|---|
| 20 nov 2024 | Privilege Escalation | vCenter Server | Alta 7,5 | 17% |
| 17 lug 2024 | Incorrect Default File Permissions Vulnerability | vCenter Server | Media 6,5 | 13% |
| 22 gen 2024 | Out-of-Bounds Write | vCenter Server | Critica 9,8 | 99,2% |
| 10 gen 2022 | Improper Access Control | vCenter Server | Media 5,3 | 49% |
| 3 nov 2021 | Information Disclosure | vCenter Server | Critica 9,8 | 90% |
| 3 nov 2021 | Remote Code Execution | vCenter Server | Critica 9,8 | 99,9% |
| 3 nov 2021 | Improper Input Validation | vCenter Server | Critica 9,8 | >99,9% |
| 3 nov 2021 | File Upload | vCenter Server | Critica 9,8 | >99,9% |
Fonti: Known Exploited Vulnerabilities (CISA, pubblico dominio), CVE records (cve.org) e EPSS (FIRST). La probabilità di attacco è la stima EPSS che qualcuno provi a sfruttare la falla nei prossimi 30 giorni.