VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi may exploit this issue to corrupt memory leading to an escape of the ESXi sandbox.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Vmsa 2022 0030 | — | Upgrade VMware ESXi 7.0.3 to build number 20842708Upgrade VMware ESXi 6.7 to build number 20497097Upgrade VMware ESXi 7.0.2 to build number 20842708Upgrade VMware ESXi 7.0.0 to build number 20842708Upgrade VMware ESXi 7.0.1 to build number 20842708Upgrade VMware ESXi 6.5 to build number 20502893 | Dec 12, 2022 | Dec 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub