651 matches found
Heap overflow
VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure...
CVE-2022-31699
VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure...
CVE-2022-31699
VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure...
多款VMware产品缓冲区错误漏洞
VMware ESXi is a server virtualization platform that can be installed directly on physical servers, VMware Workstation is a set of virtual machine software, and VMware Fusion is a set of virtual machine software designed to run Windows applications on Macs. VMware Fusion is a suite of virtual...
CVE-2022-31696
VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi may exploit this issue to corrupt memory leading to an escape of the ESXi sandbox...
PT-2022-5844 · Vmware · Vmware Esxi +2
Name of the Vulnerable Software and Affected Versions: VMware ESXi, Workstation, and Fusion affected versions not specified Description: A heap out-of-bounds write vulnerability in the USB 2.0 controller EHCI allows a malicious actor with local administrative privileges on a virtual machine to...
CVE-2022-31696
CVE-2022-31696 is a memory‑corruption flaw in VMware ESXi related to how a network socket is handled. A local, authenticated attacker could exploit this to escape the ESXi sandbox. Affected: ESXi (versions referenced in connected docs). Impact: potential memory corruption with high severity. Miti...
VMware ESXi和vCenter Server 信息泄露漏洞
VMware ESXi and VMware vCenter Server are both products of VMware, Inc. VMware ESXi is a server virtualization platform that can be installed directly on physical servers. vMware vCenter Server is a suite of server and virtualization management software. The software provides a centralized platfo...
VMware ESXi和vCenter Server 缓冲区错误漏洞
VMware ESXi and VMware vCenter Server are both products of VMware, Inc. VMware ESXi is a server virtualization platform that can be installed directly on physical servers. vMware vCenter Server is a suite of server and virtualization management software. The software provides a centralized platfo...
PT-2022-6689 · Vmware · Vmware Esxi
Name of the Vulnerable Software and Affected Versions: VMware ESXi affected versions not specified Description: The issue is related to a heap-overflow vulnerability in VMware ESXi. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a...
CVE-2022-31681
VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service condition on the host...
CVE-2022-31681
VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service condition on the host...
PT-2022-5009 · Vmware · Vmware Esxi
Name of the Vulnerable Software and Affected Versions: VMware ESXi affected versions not specified Description: The issue is related to a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process may create a denial of service condition on the host. This can b...
New Malware Families Found Targeting VMware ESXi Hypervisors
Threat actors have been found deploying never-before-seen post-compromise implants in VMware's virtualization software to seize control of infected systems and evade detection. Google's Mandiant threat intelligence division referred to it as a "novel malware ecosystem" that impacts VMware ESXi,...
ESXi 6.5 / 6.7 / 7.0 Heap Overflow RCE (VMSA-2022-0001)
The remote VMware ESXi host is version 6.5, 6.7 or 7.0 and is affected by a heap overflow vulnerability in CD-ROM device emulation. A malicious actor with access to a virtual machine with CD-ROM device emulation may be able to exploit this vulnerability in conjunction with other issues to execute...
Chile government’s Windows and Linux servers hit by RedAlert ransomware
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The Chilean Ministry of Interior asserted that RedAlert ransomware aka N13V attack had disrupted the operations and online services of a government agency in the country. In classic double-extortion...
VMware ESXi TCP/IP Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of VMware ESXi. Authentication is not required to exploit this vulnerability. The specific flaw exists within the TCP/IP kernel module. The issue results from the lack of proper validation of...
VMware ESXi 安全漏洞
VMware ESXi is a suite of server virtualization platforms from VMware that can be installed directly on physical servers. VMware ESXi ESXi70U1b-17168206 - A security vulnerability exists in ESXi version 670-20211104001, which stems from an unprotected alternative channel to return branch target...
VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities
3. Return-Stack-Buffer-Underflow CVE-2022-29901, CVE-2022-28693, CVE-2022-26373 and Branch Type Confusion CVE-2022-23816, CVE-2022-23825 vulnerabilities VMware ESXi contains Return-Stack-Buffer-Underflow CVE-2022-29901, CVE-2022-28693, CVE-2022-26373 and Branch Type Confusion CVE-2022-23816,...
VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities
3. Return-Stack-Buffer-Underflow CVE-2022-29901, CVE-2022-28693, CVE-2022-26373 and Branch Type Confusion CVE-2022-23816, CVE-2022-23825 vulnerabilities VMware ESXi contains Return-Stack-Buffer-Underflow CVE-2022-29901, CVE-2022-28693, CVE-2022-26373 and Branch Type Confusion CVE-2022-23816,...