Lucene search

K
nvd[email protected]NVD:CVE-2024-37086
HistoryJun 25, 2024 - 3:15 p.m.

CVE-2024-37086

2024-06-2515:15:12
web.nvd.nist.gov
vmware esxi
out-of-bounds read
local admin
denial-of-service

6.8 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

0.0004 Low

EPSS

Percentile

9.1%

VMware ESXi contains an out-of-bounds read vulnerability. A
malicious actor with local administrative privileges on a virtual
machine with an existing snapshot may trigger an out-of-bounds read
leading to a denial-of-service condition of the host.

6.8 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

0.0004 Low

EPSS

Percentile

9.1%

Related for NVD:CVE-2024-37086