Vulnerability-Lookup

CVE-2024-22254 (GCVE-0-2024-22254)

Vulnerability from cvelistv5 – Published: 2024-03-05 17:58 – Updated: 2024-08-14 18:53

Title

Out-of-bounds write vulnerability

Summary

VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.

Severity

7.9 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-14 18:20 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

vmware CNA under the mitre root

CNA scorecard C 64/100 over 253 records in the last 180 days details

References

1 reference

URL	Tags
https://www.vmware.com/security/advisories/VMSA-2…

Impacted products

4 products

Vendor	Product	Version
n/a	VMware ESXi	Affected: 8.0 , < ESXi80U2sb-23305545 (custom) Affected: 8.0 , < ESXi80U1d-23299997 (custom) Affected: 7.0 , < ESXi70U3p-23307199 (custom)
n/a	VMware Cloud Foundation	Affected: 5.x Affected: 4.x
vmware	vmware_esxi	Affected: 8.0 , < ESXi80U2sb-23305545 (custom) Affected: 8.0 , < ESXi80U1d-23299997 (custom) Affected: 7.0 , < ESXi70U3p-23307199 (custom) cpe:2.3:a:vmware:vmware_esxi::::::::
broadcom	vmware_cloud_foundation	Affected: 5.0 Affected: 4.0 cpe:2.3:a:broadcom:vmware_cloud_foundation::::::::

Date Public

2024-03-05 04:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:vmware:vmware_esxi:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "vmware_esxi",
            "vendor": "vmware",
            "versions": [
              {
                "lessThan": "ESXi80U2sb-23305545",
                "status": "affected",
                "version": "8.0",
                "versionType": "custom"
              },
              {
                "lessThan": "ESXi80U1d-23299997",
                "status": "affected",
                "version": "8.0",
                "versionType": "custom"
              },
              {
                "lessThan": "ESXi70U3p-23307199",
                "status": "affected",
                "version": "7.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:broadcom:vmware_cloud_foundation:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "vmware_cloud_foundation",
            "vendor": "broadcom",
            "versions": [
              {
                "status": "affected",
                "version": "5.0"
              },
              {
                "status": "affected",
                "version": "4.0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-22254",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-14T18:20:04.440392Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-14T18:53:20.387Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:43:33.752Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "VMware ESXi",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "ESXi80U2sb-23305545",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            },
            {
              "lessThan": "ESXi80U1d-23299997",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            },
            {
              "lessThan": "ESXi70U3p-23307199",
              "status": "affected",
              "version": "7.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "VMware Cloud Foundation",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "5.x"
            },
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        }
      ],
      "datePublic": "2024-03-05T04:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "VMware ESXi contains an out-of-bounds write vulnerability.\u0026nbsp;\u003cspan style=\"background-color: var(--wht);\"\u003eA malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.\u003c/span\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003cbr\u003e"
            }
          ],
          "value": "VMware ESXi contains an out-of-bounds write vulnerability.\u00a0A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.\n\n\n\n\n\n\n\n\n\n\n\n"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 7.9,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-03-05T17:59:53.114Z",
        "orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
        "shortName": "vmware"
      },
      "references": [
        {
          "url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Out-of-bounds write vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
    "assignerShortName": "vmware",
    "cveId": "CVE-2024-22254",
    "datePublished": "2024-03-05T17:58:24.341Z",
    "dateReserved": "2024-01-08T18:43:15.942Z",
    "dateUpdated": "2024-08-14T18:53:20.387Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-22254",
      "date": "2026-10-15",
      "epss": "0.00501",
      "percentile": "0.41494"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "VMware ESXi",
                "vendor": "n/a",
                "versions": [
                  {
                    "lessThan": "ESXi80U2sb-23305545",
                    "status": "affected",
                    "version": "8.0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "ESXi80U1d-23299997",
                    "status": "affected",
                    "version": "8.0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "ESXi70U3p-23307199",
                    "status": "affected",
                    "version": "7.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "VMware Cloud Foundation",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "5.x"
                  },
                  {
                    "status": "affected",
                    "version": "4.x"
                  }
                ]
              }
            ],
            "source": "security@vmware.com"
          },
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:a:vmware:vmware_esxi:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "vmware_esxi",
                "vendor": "vmware",
                "versions": [
                  {
                    "lessThan": "ESXi80U2sb-23305545",
                    "status": "affected",
                    "version": "8.0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "ESXi80U1d-23299997",
                    "status": "affected",
                    "version": "8.0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "ESXi70U3p-23307199",
                    "status": "affected",
                    "version": "7.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:broadcom:vmware_cloud_foundation:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "vmware_cloud_foundation",
                "vendor": "broadcom",
                "versions": [
                  {
                    "status": "affected",
                    "version": "5.0"
                  },
                  {
                    "status": "affected",
                    "version": "4.0"
                  }
                ]
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3D725D84-6426-459F-9B49-ADE7A13FA19A",
                    "versionEndIncluding": "5.0",
                    "versionStartIncluding": "4.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*",
                    "matchCriteriaId": "5CBA6B5A-F345-41D1-8AA0-E5F274A2D8FB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:*",
                    "matchCriteriaId": "2C8DB7F6-5765-4355-B30E-9CAC39ECA5D9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:*",
                    "matchCriteriaId": "A790D41E-B398-4233-9EC7-CF5BE2BC3161",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:*",
                    "matchCriteriaId": "B7619C16-5306-4C4A-88E8-E80876635F66",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1c:*:*:*:*:*:*",
                    "matchCriteriaId": "238E7AF4-722B-423D-ABB1-424286B06715",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1d:*:*:*:*:*:*",
                    "matchCriteriaId": "1E4DE8C7-72FB-4BEC-AD9E-378786295011",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1e:*:*:*:*:*:*",
                    "matchCriteriaId": "2E6DE184-35C8-4A13-91D4-4B43E9F0168C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:*",
                    "matchCriteriaId": "D3E3A02D-6C1E-4DE8-B845-60F53C056F32",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2a:*:*:*:*:*:*",
                    "matchCriteriaId": "12D385F0-DB2B-4802-AD0E-31441DA056B9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2c:*:*:*:*:*:*",
                    "matchCriteriaId": "2C202879-9230-4E1D-BAB8-4FB7CE4BBC24",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2d:*:*:*:*:*:*",
                    "matchCriteriaId": "CC6DC107-5142-4155-A33B-D5BE72E9ED38",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2e:*:*:*:*:*:*",
                    "matchCriteriaId": "39817170-5C45-4F8A-916D-81B7352055DD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3:*:*:*:*:*:*",
                    "matchCriteriaId": "4ADC3CFF-7415-46A5-817A-2F053B261E8C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3c:*:*:*:*:*:*",
                    "matchCriteriaId": "A2F831A7-544E-4B45-BA49-7F7A0234579C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3d:*:*:*:*:*:*",
                    "matchCriteriaId": "80A0DD2E-F1CC-413B-91F9-E3986011A0A0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3e:*:*:*:*:*:*",
                    "matchCriteriaId": "C77771B2-BC64-47A5-B6DB-9CBCC4456B67",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3f:*:*:*:*:*:*",
                    "matchCriteriaId": "86DE9CE6-F6C0-47D2-B3AB-34852A8B9603",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3g:*:*:*:*:*:*",
                    "matchCriteriaId": "E75B2F03-702E-4359-9BB2-E234F1DC38C8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3i:*:*:*:*:*:*",
                    "matchCriteriaId": "ACAA9494-5248-4B01-8BC1-C38AB615FFD7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3j:*:*:*:*:*:*",
                    "matchCriteriaId": "BF12014B-BF2B-42EF-B70C-59CDA8E2176F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3k:*:*:*:*:*:*",
                    "matchCriteriaId": "F965D853-EE4A-41F5-840B-2D009ACC9754",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3l:*:*:*:*:*:*",
                    "matchCriteriaId": "BA7B7313-FF53-43C9-AF4D-B639053D3FA3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3m:*:*:*:*:*:*",
                    "matchCriteriaId": "9FB5738F-27E4-42C6-BD1B-F7F66A7EF0A6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3n:*:*:*:*:*:*",
                    "matchCriteriaId": "FC3668A6-262B-42BF-9E90-28BAA9BB3347",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3o:*:*:*:*:*:*",
                    "matchCriteriaId": "DA4E9185-44BA-41E6-8600-C8616E199334",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:7.0.0:b:*:*:*:*:*:*",
                    "matchCriteriaId": "BC6F088D-0404-4588-9788-7A5903C5BC82",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:-:*:*:*:*:*:*",
                    "matchCriteriaId": "7A1A402A-9262-4B97-A0B7-E5AE045E394D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:a:*:*:*:*:*:*",
                    "matchCriteriaId": "FE44B379-9943-4DD1-8514-26F87482AFA8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:b:*:*:*:*:*:*",
                    "matchCriteriaId": "2A797377-8945-4D75-AA68-A768855E5842",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:c:*:*:*:*:*:*",
                    "matchCriteriaId": "79D84D76-54BE-49E9-905C-7D65B4B42D68",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1:*:*:*:*:*:*",
                    "matchCriteriaId": "2F8767F7-7C3D-457D-9EAC-E8A30796F751",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1a:*:*:*:*:*:*",
                    "matchCriteriaId": "29AF8474-2D7A-4C5A-82B9-7A873AD90C2E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1c:*:*:*:*:*:*",
                    "matchCriteriaId": "7781A2CA-D927-48CD-9932-AE42B7BA1EFE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_2:*:*:*:*:*:*",
                    "matchCriteriaId": "360C1B71-5360-4379-B0DE-63BB8F5E6DA2",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "VMware ESXi contains an out-of-bounds write vulnerability.\u00a0A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.\n\n\n\n\n\n\n\n\n\n\n\n"
          },
          {
            "lang": "es",
            "value": "VMware ESXi contiene una vulnerabilidad de escritura fuera de los l\u00edmites. Un actor malicioso con privilegios dentro del proceso VMX puede desencadenar una escritura fuera de los l\u00edmites que conduzca a un escape del entorno limitado."
          }
        ],
        "id": "CVE-2024-22254",
        "lastModified": "2026-06-17T07:11:02.387",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 7.9,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 1.5,
              "impactScore": 5.8,
              "source": "security@vmware.com",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 8.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.5,
              "impactScore": 6.0,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2024-22254",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-14T18:20:04.440392Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2024-03-05T18:15:48.100",
        "references": [
          {
            "source": "security@vmware.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html"
          }
        ],
        "sourceIdentifier": "security@vmware.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-787"
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-28T20:47:31+00:00",
      "cve": "CVE-2024-22254",
      "id": "CVE-2024-22254",
      "initial_release_date": "2024-03-05T04:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Out-of-bounds write vulnerability",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-22254.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-01T22:43:33.752Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:a:vmware:vmware_esxi:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "vmware_esxi",
                "vendor": "vmware",
                "versions": [
                  {
                    "lessThan": "ESXi80U2sb-23305545",
                    "status": "affected",
                    "version": "8.0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "ESXi80U1d-23299997",
                    "status": "affected",
                    "version": "8.0",
                    "versionType": "custom"
                  },
                  {
                    "lessThan": "ESXi70U3p-23307199",
                    "status": "affected",
                    "version": "7.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:broadcom:vmware_cloud_foundation:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "product": "vmware_cloud_foundation",
                "vendor": "broadcom",
                "versions": [
                  {
                    "status": "affected",
                    "version": "5.0"
                  },
                  {
                    "status": "affected",
                    "version": "4.0"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-22254",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-08-14T18:20:04.440392Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-787",
                    "description": "CWE-787 Out-of-bounds Write",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-05-23T19:01:16.836Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "VMware ESXi",
              "vendor": "n/a",
              "versions": [
                {
                  "lessThan": "ESXi80U2sb-23305545",
                  "status": "affected",
                  "version": "8.0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "ESXi80U1d-23299997",
                  "status": "affected",
                  "version": "8.0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "ESXi70U3p-23307199",
                  "status": "affected",
                  "version": "7.0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "VMware Cloud Foundation",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "5.x"
                },
                {
                  "status": "affected",
                  "version": "4.x"
                }
              ]
            }
          ],
          "datePublic": "2024-03-05T04:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "VMware ESXi contains an out-of-bounds write vulnerability.\u0026nbsp;\u003cspan style=\"background-color: var(--wht);\"\u003eA malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.\u003c/span\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e\u003cbr\u003e"
                }
              ],
              "value": "VMware ESXi contains an out-of-bounds write vulnerability.\u00a0A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.\n\n\n\n\n\n\n\n\n\n\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 7.9,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-03-05T17:59:53.114Z",
            "orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
            "shortName": "vmware"
          },
          "references": [
            {
              "url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Out-of-bounds write vulnerability",
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d",
        "assignerShortName": "vmware",
        "cveId": "CVE-2024-22254",
        "datePublished": "2024-03-05T17:58:24.341Z",
        "dateReserved": "2024-01-08T18:43:15.942Z",
        "dateUpdated": "2024-08-14T18:53:20.387Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

BDU:2024-01810 (CVE-2024-22254)

Vulnerability from fstec – Published: 2024-03-06 – Updated: 2024-04-27 – View on bdu.fstec.ru Exploit exists Yes Fixed

Title

Уязвимость программных продуктов VMware ESXi, Workstation, Fusion, Cloud Foundation, связанная с записью за границами буфера, позволяющая нарушителю повысить свои привилегии

Summary

Уязвимость программных продуктов VMware ESXi, Workstation, Fusion, Cloud Foundation связана с записью за границами буфера. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии

Severity

5.9 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:M/C:C/I:C/A:N

7.9 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Yes

Remediation

Software update

CWE

CWE-787 - Запись за границами буфера

Aliases

CVE-2024-22254, VMSA-2024-0006

References

2 references

URL
https://www.vmware.com/security/advisories/VMSA-2024-0006.html
https://safe-surf.ru/upload/VULN-new/VULN.2024-04-26.1.pdf

Impacted products

3 products from 1 vendor

Vendors

Broadcom Inc.

Products

VMware ESXi, VMWare Workstation, VMware Fusion

Versions

от 8.0 до 8.0 Update 2b (VMware ESXi), от 8.0 до 8.0 Update 1d (VMware ESXi), от 7.0 до 7.0 Update 3p (VMware ESXi), от 17.0 до 17.5.1 (VMWare Workstation), от 13.0 до 13.5.1 (VMware Fusion), от 4.0 до KB88287 (VMware ESXi), от 5.0 до KB88287 (VMware ESXi)

Product types

Virtualization software

Mitigations

Использование рекомендаций производителя: https://www.vmware.com/security/advisories/VMSA-2024-0006.html

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:M/C:C/I:C/A:N",
  "CVSS 3.0": "AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Broadcom Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u043e\u0442 8.0 \u0434\u043e 8.0 Update 2b (VMware ESXi), \u043e\u0442 8.0 \u0434\u043e 8.0 Update 1d (VMware ESXi), \u043e\u0442 7.0 \u0434\u043e 7.0 Update 3p (VMware ESXi), \u043e\u0442 17.0 \u0434\u043e 17.5.1 (VMWare Workstation), \u043e\u0442 13.0 \u0434\u043e 13.5.1 (VMware Fusion), \u043e\u0442 4.0 \u0434\u043e KB88287 (VMware ESXi), \u043e\u0442 5.0 \u0434\u043e KB88287 (VMware ESXi)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://www.vmware.com/security/advisories/VMSA-2024-0006.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "05.03.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "27.04.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.03.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-01810",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-22254, VMSA-2024-0006",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "VMware ESXi, VMWare Workstation, VMware Fusion",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 VMware ESXi, Workstation, Fusion, Cloud Foundation, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0417\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 (CWE-787)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 VMware ESXi, Workstation, Fusion, Cloud Foundation \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html\nhttps://safe-surf.ru/upload/VULN-new/VULN.2024-04-26.1.pdf",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438/\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-787",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,9)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,9)"
}

CERTFR-2024-AVI-0186

Vulnerability from certfr_avis - Published: 2024-03-06 - Updated: 2024-03-06

De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

Solution

Se référer aux mesures de contournement proposées par l’éditeur (cf. section Documentation).

Contournement provisoire

Se référer au bulletin de sécurité de l'éditeur pour les mesures de contournement (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
VMware	ESXi	ESXi versions 7.0 sans le correctif de sécurité ESXi70U3p-23307199
VMware	N/A	Workstation versions 17.x antérieures à 17.5.1
VMware	Fusion	Fusion versions 13.x antérieures à 13.5.1 sur MacOS
VMware	N/A	VMware Cloud Foundation (ESXi) versions 5.x et 4.x sans le correctif de sécurité KB88287
VMware	ESXi	ESXi versions 8.0 sans les correctifs de sécurité ESXi80U1d-23299997 et ESXi80U2sb-23305545

References

Title

Publication Time

CNVD-2024-45223

Vulnerability from cnvd - Published: 2024-11-18

Title

VMware ESXi越界写入漏洞

Description

VMware ESXi是美国威睿（VMware）公司的一套可直接安装在物理服务器上的服务器虚拟化平台。 VMware ESXi存在越界写入漏洞，具有管理权限的本地攻击者可利用该漏洞导致沙箱逃逸。

Severity

中

Patch Name

VMware ESXi越界写入漏洞的补丁

Patch Description

VMware ESXi是美国威睿（VMware）公司的一套可直接安装在物理服务器上的服务器虚拟化平台。 VMware ESXi存在越界写入漏洞，具有管理权限的本地攻击者可利用该漏洞导致沙箱逃逸。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://www.vmware.com/security/advisories/VMSA-2024-0006.html

Reference

https://www.vmware.com/security/advisories/VMSA-2024-0006.html

Impacted products

Name
['VMWare VMware ESXi 7.0', 'VMWare VMware ESXi 8.0', 'VMWare VMware ESXi 8.0 [2]']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-22254"
    }
  },
  "description": "VMware ESXi\u662f\u7f8e\u56fd\u5a01\u777f\uff08VMware\uff09\u516c\u53f8\u7684\u4e00\u5957\u53ef\u76f4\u63a5\u5b89\u88c5\u5728\u7269\u7406\u670d\u52a1\u5668\u4e0a\u7684\u670d\u52a1\u5668\u865a\u62df\u5316\u5e73\u53f0\u3002\n\nVMware ESXi\u5b58\u5728\u8d8a\u754c\u5199\u5165\u6f0f\u6d1e\uff0c\u5177\u6709\u7ba1\u7406\u6743\u9650\u7684\u672c\u5730\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u6c99\u7bb1\u9003\u9038\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.vmware.com/security/advisories/VMSA-2024-0006.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-45223",
  "openTime": "2024-11-18",
  "patchDescription": "VMware ESXi\u662f\u7f8e\u56fd\u5a01\u777f\uff08VMware\uff09\u516c\u53f8\u7684\u4e00\u5957\u53ef\u76f4\u63a5\u5b89\u88c5\u5728\u7269\u7406\u670d\u52a1\u5668\u4e0a\u7684\u670d\u52a1\u5668\u865a\u62df\u5316\u5e73\u53f0\u3002\r\n\r\nVMware ESXi\u5b58\u5728\u8d8a\u754c\u5199\u5165\u6f0f\u6d1e\uff0c\u5177\u6709\u7ba1\u7406\u6743\u9650\u7684\u672c\u5730\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u6c99\u7bb1\u9003\u9038\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "VMware ESXi\u8d8a\u754c\u5199\u5165\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "VMWare VMware ESXi 7.0",
      "VMWare VMware ESXi 8.0",
      "VMWare VMware ESXi 8.0 [2]"
    ]
  },
  "referenceLink": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html",
  "serverity": "\u4e2d",
  "submitTime": "2024-05-28",
  "title": "VMware ESXi\u8d8a\u754c\u5199\u5165\u6f0f\u6d1e"
}

FKIE_CVE-2024-22254

Vulnerability from fkie_nvd - Published: 2024-03-05 18:15 - Updated: 2026-06-17 07:11

Severity

7.9 (High) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
8.2 (High) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Summary

VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.

References

	URL	Tags
	security@vmware.com	https://www.vmware.com/security/advisories/VMSA-2024-0006.html	Vendor Advisory
	af854a3a-2127-422b-91ae-364da2661108	https://www.vmware.com/security/advisories/VMSA-2024-0006.html	Vendor Advisory

Impacted products

Vendor	Product	Version
vmware	cloud_foundation	*
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0
vmware	esxi	7.0.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0
vmware	esxi	8.0

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "VMware ESXi",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "ESXi80U2sb-23305545",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            },
            {
              "lessThan": "ESXi80U1d-23299997",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            },
            {
              "lessThan": "ESXi70U3p-23307199",
              "status": "affected",
              "version": "7.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "VMware Cloud Foundation",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "5.x"
            },
            {
              "status": "affected",
              "version": "4.x"
            }
          ]
        }
      ],
      "source": "security@vmware.com"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:vmware:vmware_esxi:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "vmware_esxi",
          "vendor": "vmware",
          "versions": [
            {
              "lessThan": "ESXi80U2sb-23305545",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            },
            {
              "lessThan": "ESXi80U1d-23299997",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            },
            {
              "lessThan": "ESXi70U3p-23307199",
              "status": "affected",
              "version": "7.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:broadcom:vmware_cloud_foundation:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "vmware_cloud_foundation",
          "vendor": "broadcom",
          "versions": [
            {
              "status": "affected",
              "version": "5.0"
            },
            {
              "status": "affected",
              "version": "4.0"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3D725D84-6426-459F-9B49-ADE7A13FA19A",
              "versionEndIncluding": "5.0",
              "versionStartIncluding": "4.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "5CBA6B5A-F345-41D1-8AA0-E5F274A2D8FB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:*",
              "matchCriteriaId": "2C8DB7F6-5765-4355-B30E-9CAC39ECA5D9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:*",
              "matchCriteriaId": "A790D41E-B398-4233-9EC7-CF5BE2BC3161",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:*",
              "matchCriteriaId": "B7619C16-5306-4C4A-88E8-E80876635F66",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1c:*:*:*:*:*:*",
              "matchCriteriaId": "238E7AF4-722B-423D-ABB1-424286B06715",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1d:*:*:*:*:*:*",
              "matchCriteriaId": "1E4DE8C7-72FB-4BEC-AD9E-378786295011",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_1e:*:*:*:*:*:*",
              "matchCriteriaId": "2E6DE184-35C8-4A13-91D4-4B43E9F0168C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:*",
              "matchCriteriaId": "D3E3A02D-6C1E-4DE8-B845-60F53C056F32",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2a:*:*:*:*:*:*",
              "matchCriteriaId": "12D385F0-DB2B-4802-AD0E-31441DA056B9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2c:*:*:*:*:*:*",
              "matchCriteriaId": "2C202879-9230-4E1D-BAB8-4FB7CE4BBC24",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2d:*:*:*:*:*:*",
              "matchCriteriaId": "CC6DC107-5142-4155-A33B-D5BE72E9ED38",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_2e:*:*:*:*:*:*",
              "matchCriteriaId": "39817170-5C45-4F8A-916D-81B7352055DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3:*:*:*:*:*:*",
              "matchCriteriaId": "4ADC3CFF-7415-46A5-817A-2F053B261E8C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3c:*:*:*:*:*:*",
              "matchCriteriaId": "A2F831A7-544E-4B45-BA49-7F7A0234579C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3d:*:*:*:*:*:*",
              "matchCriteriaId": "80A0DD2E-F1CC-413B-91F9-E3986011A0A0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3e:*:*:*:*:*:*",
              "matchCriteriaId": "C77771B2-BC64-47A5-B6DB-9CBCC4456B67",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3f:*:*:*:*:*:*",
              "matchCriteriaId": "86DE9CE6-F6C0-47D2-B3AB-34852A8B9603",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3g:*:*:*:*:*:*",
              "matchCriteriaId": "E75B2F03-702E-4359-9BB2-E234F1DC38C8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3i:*:*:*:*:*:*",
              "matchCriteriaId": "ACAA9494-5248-4B01-8BC1-C38AB615FFD7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3j:*:*:*:*:*:*",
              "matchCriteriaId": "BF12014B-BF2B-42EF-B70C-59CDA8E2176F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3k:*:*:*:*:*:*",
              "matchCriteriaId": "F965D853-EE4A-41F5-840B-2D009ACC9754",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3l:*:*:*:*:*:*",
              "matchCriteriaId": "BA7B7313-FF53-43C9-AF4D-B639053D3FA3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3m:*:*:*:*:*:*",
              "matchCriteriaId": "9FB5738F-27E4-42C6-BD1B-F7F66A7EF0A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3n:*:*:*:*:*:*",
              "matchCriteriaId": "FC3668A6-262B-42BF-9E90-28BAA9BB3347",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0:update_3o:*:*:*:*:*:*",
              "matchCriteriaId": "DA4E9185-44BA-41E6-8600-C8616E199334",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:7.0.0:b:*:*:*:*:*:*",
              "matchCriteriaId": "BC6F088D-0404-4588-9788-7A5903C5BC82",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "7A1A402A-9262-4B97-A0B7-E5AE045E394D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:a:*:*:*:*:*:*",
              "matchCriteriaId": "FE44B379-9943-4DD1-8514-26F87482AFA8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:b:*:*:*:*:*:*",
              "matchCriteriaId": "2A797377-8945-4D75-AA68-A768855E5842",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:c:*:*:*:*:*:*",
              "matchCriteriaId": "79D84D76-54BE-49E9-905C-7D65B4B42D68",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1:*:*:*:*:*:*",
              "matchCriteriaId": "2F8767F7-7C3D-457D-9EAC-E8A30796F751",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1a:*:*:*:*:*:*",
              "matchCriteriaId": "29AF8474-2D7A-4C5A-82B9-7A873AD90C2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_1c:*:*:*:*:*:*",
              "matchCriteriaId": "7781A2CA-D927-48CD-9932-AE42B7BA1EFE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:vmware:esxi:8.0:update_2:*:*:*:*:*:*",
              "matchCriteriaId": "360C1B71-5360-4379-B0DE-63BB8F5E6DA2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware ESXi contains an out-of-bounds write vulnerability.\u00a0A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.\n\n\n\n\n\n\n\n\n\n\n\n"
    },
    {
      "lang": "es",
      "value": "VMware ESXi contiene una vulnerabilidad de escritura fuera de los l\u00edmites. Un actor malicioso con privilegios dentro del proceso VMX puede desencadenar una escritura fuera de los l\u00edmites que conduzca a un escape del entorno limitado."
    }
  ],
  "id": "CVE-2024-22254",
  "lastModified": "2026-06-17T07:11:02.387",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 7.9,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.5,
        "impactScore": 5.8,
        "source": "security@vmware.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 8.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.5,
        "impactScore": 6.0,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-22254",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-08-14T18:20:04.440392Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-03-05T18:15:48.100",
  "references": [
    {
      "source": "security@vmware.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html"
    }
  ],
  "sourceIdentifier": "security@vmware.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-MW76-72HW-4357

Vulnerability from github – Published: 2024-03-05 18:31 – Updated: 2025-05-07 18:30

Details

VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.

Severity

7.9 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-22254"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-03-05T18:15:48Z",
    "severity": "HIGH"
  },
  "details": "VMware ESXi contains an out-of-bounds write vulnerability.\u00a0A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.",
  "id": "GHSA-mw76-72hw-4357",
  "modified": "2025-05-07T18:30:36Z",
  "published": "2024-03-05T18:31:14Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22254"
    },
    {
      "type": "WEB",
      "url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2024-22254

Vulnerability from gsd - Updated: 2024-01-09 06:02

Details

VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.

Aliases

CVE-2024-22254

JSON

To clipboard

{
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-22254"
      ],
      "details": "VMware ESXi contains an out-of-bounds write vulnerability.\u00a0A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.\n\n\n\n\n\n\n\n\n\n\n\n",
      "id": "GSD-2024-22254",
      "modified": "2024-01-09T06:02:15.334766Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@vmware.com",
        "ID": "CVE-2024-22254",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "VMware ESXi",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "8.0",
                          "version_value": "ESXi80U2sb-23305545"
                        },
                        {
                          "version_affected": "\u003c",
                          "version_name": "7.0",
                          "version_value": "ESXi70U3p-23307199"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "VMware Cloud Foundation",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "5.x"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "4.x"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "VMware ESXi contains an out-of-bounds write vulnerability.\u00a0A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.\n\n\n\n\n\n\n\n\n\n\n\n"
          }
        ]
      },
      "generator": {
        "engine": "Vulnogram 0.1.0-dev"
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 7.9,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html",
            "refsource": "MISC",
            "url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html"
          }
        ]
      },
      "source": {
        "discovery": "UNKNOWN"
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "descriptions": [
          {
            "lang": "en",
            "value": "VMware ESXi contains an out-of-bounds write vulnerability.\u00a0A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.\n\n\n\n\n\n\n\n\n\n\n\n"
          }
        ],
        "id": "CVE-2024-22254",
        "lastModified": "2024-03-05T18:50:18.333",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 7.9,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 1.5,
              "impactScore": 5.8,
              "source": "security@vmware.com",
              "type": "Secondary"
            }
          ]
        },
        "published": "2024-03-05T18:15:48.100",
        "references": [
          {
            "source": "security@vmware.com",
            "url": "https://www.vmware.com/security/advisories/VMSA-2024-0006.html"
          }
        ],
        "sourceIdentifier": "security@vmware.com",
        "vulnStatus": "Awaiting Analysis"
      }
    }
  }
}

tid-208

Vulnerability from emb3d

Type

system-software

Link

Show details on source website

Description

Virtualization mechanisms allow multiple operating sytem instances to share the same underlying hardware. Hypervisor software is responsible for orchestrating and maintaining the separation between virtual machines (VMs) to ensure that failure or compromise within one VM does not affect others. However, vulnerabilities in APIs and services the hypervisor exposes to guest VMs, the implementation of virtualized hardware abstractions, or other hypervisor components could be used by an adversary to escape the virtualized environments. By escaping the environment, a threat actor could manipulate the underlying hypervisor, operating system, or application/data within other environments hosted on that device.

CWE

CWE-693: Protection Mechanisms Failure (Pillar)

WID-SEC-W-2024-0555

Vulnerability from csaf_certbund - Published: 2024-03-05 23:00 - Updated: 2024-03-05 23:00

Summary

VMware Produkte: Mehrere Schwachstellen

Severity

Hoch

Scope

4 vulnerabilities in this advisory, including CVE-2024-22254.

CVE-2024-22254

In VMware ESXi, VMware Workstation und VMware Cloud Foundation existiert eine Schwachstelle. Diese ist auf eine Out-of-Bounds-Write-Anfälligkeit im VMX-Prozess zurückzuführen. Ein entfernter, authentisierter Angreifer mit erweiterten Rechten kann diese Schwachstelle ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2024-22254 (GCVE-0-2024-22254)

BDU:2024-01810 (CVE-2024-22254)

CERTFR-2024-AVI-0186

Solution

Contournement provisoire

CNVD-2024-45223

FKIE_CVE-2024-22254

GHSA-MW76-72HW-4357

GSD-2024-22254

tid-208

Vulnerability from emb3d

WID-SEC-W-2024-0555

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour