CVE-2022-31681

2022-10-0700:00:00

vmware

www.cve.org

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service condition on the host.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "VMware ESXi",
    "versions": [
      {
        "version": "VMware ESXi (7.0 prior to ESXi70U3sf-20036586, 6.7 prior to ESXi670-202210101-SG & 6.5 prior to ESXi650-202210101-SG)",
        "status": "affected"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2022-0025.html