The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a virtual machine in conjunction with other issues.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Vmsa 2024 0011 | — | Upgrade VMware ESXi 8.0.0 to build number 23305545Upgrade VMware ESXi 7.0.1 to build number 23794019Upgrade VMware ESXi 7.0.0 to build number 23794019Upgrade VMware ESXi 7.0.2 to build number 23794019Upgrade VMware ESXi 8.0.1 to build number 23305545Upgrade VMware ESXi 7.0.3 to build number 23794019Upgrade VMware ESXi 8.0.2 to build number 23305545 | Jun 14, 2024 | May 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
