CVE-2023-20896
Gravedad CVSS v3.1:
ALTA
Tipo:
CWE-125
Lectura fuera de límites
Fecha de publicación:
22/06/2023
Última modificación:
13/07/2023
Descripción
*** Pendiente de traducción *** The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds read by sending a specially crafted packet leading to denial-of-service of certain services (vmcad, vmdird, and vmafdd).
Impacto
Puntuación base 3.x
7.50
Gravedad 3.x
ALTA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:a:vmware:vcenter_server:*:*:*:*:*:*:*:* | 4.0 (incluyendo) | 7.0 (excluyendo) |
| cpe:2.3:a:vmware:vcenter_server:7.0:-:*:*:*:*:*:* | ||
| cpe:2.3:a:vmware:vcenter_server:7.0:a:*:*:*:*:*:* | ||
| cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:* | ||
| cpe:2.3:a:vmware:vcenter_server:7.0:c:*:*:*:*:*:* | ||
| cpe:2.3:a:vmware:vcenter_server:7.0:d:*:*:*:*:*:* | ||
| cpe:2.3:a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:* | ||
| cpe:2.3:a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:* | ||
| cpe:2.3:a:vmware:vcenter_server:7.0:update1c:*:*:*:*:*:* | ||
| cpe:2.3:a:vmware:vcenter_server:7.0:update1d:*:*:*:*:*:* | ||
| cpe:2.3:a:vmware:vcenter_server:7.0:update2:*:*:*:*:*:* | ||
| cpe:2.3:a:vmware:vcenter_server:7.0:update2a:*:*:*:*:*:* | ||
| cpe:2.3:a:vmware:vcenter_server:7.0:update2b:*:*:*:*:*:* | ||
| cpe:2.3:a:vmware:vcenter_server:7.0:update2c:*:*:*:*:*:* | ||
| cpe:2.3:a:vmware:vcenter_server:7.0:update2d:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página