VMWare vCenter Server DCERPC presentation result list out of bounds memory access

Talos Vulnerability Report TALOS-2023-1800 VMWare vCenter Server DCERPC presentation result list out of bounds memory access July 13, 2023 CVE Number CVE-2023-20896 SUMMARY An out of bounds memory access vulnerability exists in the processing of packets containing presentation result lists in...

CVE-2023-20896

The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds read by sending a specially crafted packet leading to denial-of-service of certain services...

CVE-2023-20896

CVE-2023-20896 describes an out-of-bounds read in VMware vCenter Server’s DCERPC handling that can be triggered by a crafted network packet, potentially causing denial of service to vmcad, vmdird, and vmafdd. TALOS details show this affects VMware vCenter Server 7.0.3.01000 and relate it to DCERP...