CVE-2023-20894

CVE-2023-20894 is a DCERPC-related out-of-bounds write vulnerability in VMware vCenter Server. Cisco Talos and VMware describe a memory corruption flaw triggered by specially crafted network packets that can lead to remote memory corruption. TALOS details root cause as improper calculation of the...

CVE-2023-20894

The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bound write by sending a specially crafted packet leading to memory corruption...