Rapid7 Vulnerability & Exploit Database

VMSA-2024-0006: ESXi Out-of-bounds write vulnerability (CVE-2024-22254)

Free InsightVM Trial No Credit Card Necessary
Watch Demo See how it all works
Back to Search

VMSA-2024-0006: ESXi Out-of-bounds write vulnerability (CVE-2024-22254)

Severity
6
CVSS
(AV:L/AC:L/Au:M/C:C/I:C/A:N)
Published
03/05/2024
Created
03/08/2024
Added
03/07/2024
Modified
03/19/2024

Description

VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.

Solution(s)

  • vmware-esxi70-upgrade-23307199
  • vmware-esxi701-upgrade-23307199
  • vmware-esxi702-upgrade-23307199
  • vmware-esxi703-upgrade-23307199
  • vmware-esxi801-upgrade-23299997
  • vmware-esxi802-upgrade-23305546

References

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;