Lucene search

K
vmwareVMwareVMSA-2009-0001.1
HistoryJan 30, 2009 - 12:00 a.m.

ESX patches address an issue loading corrupt virtual disks and update Service Console packages

2009-01-3000:00:00
www.vmware.com
12

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.049 Low

EPSS

Percentile

92.7%

a. Loading a corrupt delta disk may cause ESX to crashIf the VMDK delta disk of a snapshot is corrupt, an ESX host might crash when the corrupted disk is loaded. VMDK delta files exist for virtual machines with one or more snapshots. This change ensures that a corrupt VMDK delta file cannot be used to crash ESX hosts.A corrupt VMDK delta disk, or virtual machine would have to be loaded by an administrator.VMware would like to thank Craig Marshall for reporting this issue.The Common Vulnerabilities and Exposures project ( cve.mitre.org) has assigned the name CVE-2008-4914 to this issue.The following table lists what action remediates the vulnerability (column 4) if a solution is available.

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.049 Low

EPSS

Percentile

92.7%