← Back

CVE-2021-22045

nvd nist
Published: Jan 4, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Exploitability: 1.1 / Impact: 6.0
Source: NVD

Description

VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow vulnerability in CD-ROM device emulation. A malicious actor with access to a virtual machine with CD-ROM device emulation may be able to exploit this vulnerability in conjunction with other issues to execute code on the hypervisor from a virtual machine.

Affected (217)

Vmware
4 products
Cloud Foundation
Workstation
Fusion
Esxi
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Cloud Foundation
From 3.0 to 3.10.2.2
Cloud Foundation
From 4.0 to 4.3.1
Workstation
From 16.0.0 to 16.2.0
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fusion
From 12.0.0 to 12.2.0
Running on/withPlatform Versions
Apple
Mac Os X
All versions
Configuration C
69 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Esxi
Version 6.5
Esxi
Version 6.5 650-201701001
Esxi
Version 6.5 650-201703001
Esxi
Version 6.5 650-201703002
Esxi
Version 6.5 650-201704001
Esxi
Version 6.5 650-201707101
Esxi
Version 6.5 650-201707102
Esxi
Version 6.5 650-201707103
Esxi
Version 6.5 650-201707201
Esxi
Version 6.5 650-201707202
Esxi
Version 6.5 650-201707203
Esxi
Version 6.5 650-201707204
Esxi
Version 6.5 650-201707205
Esxi
Version 6.5 650-201707206
Esxi
Version 6.5 650-201707207
Esxi
Version 6.5 650-201707208
Esxi
Version 6.5 650-201707209
Esxi
Version 6.5 650-201707210
Esxi
Version 6.5 650-201707211
Esxi
Version 6.5 650-201707212
Esxi
Version 6.5 650-201707213
Esxi
Version 6.5 650-201707214
Esxi
Version 6.5 650-201707215
Esxi
Version 6.5 650-201707216
Esxi
Version 6.5 650-201707217
Esxi
Version 6.5 650-201707218
Esxi
Version 6.5 650-201707219
Esxi
Version 6.5 650-201707220
Esxi
Version 6.5 650-201707221
Esxi
Version 6.5 650-201710001
Esxi
Version 6.5 650-201712001
Esxi
Version 6.5 650-201803001
Esxi
Version 6.5 650-201806001
Esxi
Version 6.5 650-201808001
Esxi
Version 6.5 650-201810001
Esxi
Version 6.5 650-201810002
Esxi
Version 6.5 650-201811001
Esxi
Version 6.5 650-201811002
Esxi
Version 6.5 650-201811301
Esxi
Version 6.5 650-201901001
Esxi
Version 6.5 650-201903001
Esxi
Version 6.5 650-201905001
Esxi
Version 6.5 650-201908001
Esxi
Version 6.5 650-201910001
Esxi
Version 6.5 650-20191004001
Esxi
Version 6.5 650-201911001
Esxi
Version 6.5 650-201911401
Esxi
Version 6.5 650-201911402
Esxi
Version 6.5 650-201912001
Esxi
Version 6.5 650-201912002
Esxi
Version 6.5 650-201912101
Esxi
Version 6.5 650-201912102
Esxi
Version 6.5 650-201912103
Esxi
Version 6.5 650-201912104
Esxi
Version 6.5 650-201912301
Esxi
Version 6.5 650-201912401
Esxi
Version 6.5 650-201912402
Esxi
Version 6.5 650-201912403
Esxi
Version 6.5 650-201912404
Esxi
Version 6.5 650-202005001
Esxi
Version 6.5 650-202006001
Esxi
Version 6.5 650-202007001
Esxi
Version 6.5 650-202010001
Esxi
Version 6.5 650-202011001
Esxi
Version 6.5 650-202011002
Esxi
Version 6.5 650-202102001
Esxi
Version 6.5 650-202102002
Esxi
Version 6.5 650-202102003
Esxi
Version 6.5 650-202107401
Configuration D
133 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Esxi
Version 6.7
Esxi
Version 6.7 670-201806001
Esxi
Version 6.7 670-201807001
Esxi
Version 6.7 670-201808001
Esxi
Version 6.7 670-201810001
Esxi
Version 6.7 670-201810101
Esxi
Version 6.7 670-201810102
Esxi
Version 6.7 670-201810103
Esxi
Version 6.7 670-201810201
Esxi
Version 6.7 670-201810202
Esxi
Version 6.7 670-201810203
Esxi
Version 6.7 670-201810204
Esxi
Version 6.7 670-201810205
Esxi
Version 6.7 670-201810206
Esxi
Version 6.7 670-201810207
Esxi
Version 6.7 670-201810208
Esxi
Version 6.7 670-201810209
Esxi
Version 6.7 670-201810210
Esxi
Version 6.7 670-201810211
Esxi
Version 6.7 670-201810212
Esxi
Version 6.7 670-201810213
Esxi
Version 6.7 670-201810214
Esxi
Version 6.7 670-201810215
Esxi
Version 6.7 670-201810216
Esxi
Version 6.7 670-201810217
Esxi
Version 6.7 670-201810218
Esxi
Version 6.7 670-201810219
Esxi
Version 6.7 670-201810220
Esxi
Version 6.7 670-201810221
Esxi
Version 6.7 670-201810222
Esxi
Version 6.7 670-201810223
Esxi
Version 6.7 670-201810224
Esxi
Version 6.7 670-201810225
Esxi
Version 6.7 670-201810226
Esxi
Version 6.7 670-201810227
Esxi
Version 6.7 670-201810228
Esxi
Version 6.7 670-201810229
Esxi
Version 6.7 670-201810230
Esxi
Version 6.7 670-201810231
Esxi
Version 6.7 670-201810232
Esxi
Version 6.7 670-201810233
Esxi
Version 6.7 670-201810234
Esxi
Version 6.7 670-201811001
Esxi
Version 6.7 670-201901001
Esxi
Version 6.7 670-201901401
Esxi
Version 6.7 670-201901402
Esxi
Version 6.7 670-201901403
Esxi
Version 6.7 670-201903001
Esxi
Version 6.7 670-201904001
Esxi
Version 6.7 670-201904201
Esxi
Version 6.7 670-201904202
Esxi
Version 6.7 670-201904203
Esxi
Version 6.7 670-201904204
Esxi
Version 6.7 670-201904205
Esxi
Version 6.7 670-201904206
Esxi
Version 6.7 670-201904207
Esxi
Version 6.7 670-201904208
Esxi
Version 6.7 670-201904209
Esxi
Version 6.7 670-201904210
Esxi
Version 6.7 670-201904211
Esxi
Version 6.7 670-201904212
Esxi
Version 6.7 670-201904213
Esxi
Version 6.7 670-201904214
Esxi
Version 6.7 670-201904215
Esxi
Version 6.7 670-201904216
Esxi
Version 6.7 670-201904217
Esxi
Version 6.7 670-201904218
Esxi
Version 6.7 670-201904219
Esxi
Version 6.7 670-201904220
Esxi
Version 6.7 670-201904221
Esxi
Version 6.7 670-201904222
Esxi
Version 6.7 670-201904223
Esxi
Version 6.7 670-201904224
Esxi
Version 6.7 670-201904225
Esxi
Version 6.7 670-201904226
Esxi
Version 6.7 670-201904227
Esxi
Version 6.7 670-201904228
Esxi
Version 6.7 670-201904229
Esxi
Version 6.7 670-201905001
Esxi
Version 6.7 670-201906002
Esxi
Version 6.7 670-201908101
Esxi
Version 6.7 670-201908102
Esxi
Version 6.7 670-201908103
Esxi
Version 6.7 670-201908104
Esxi
Version 6.7 670-201908201
Esxi
Version 6.7 670-201908202
Esxi
Version 6.7 670-201908203
Esxi
Version 6.7 670-201908204
Esxi
Version 6.7 670-201908205
Esxi
Version 6.7 670-201908206
Esxi
Version 6.7 670-201908207
Esxi
Version 6.7 670-201908208
Esxi
Version 6.7 670-201908209
Esxi
Version 6.7 670-201908210
Esxi
Version 6.7 670-201908211
Esxi
Version 6.7 670-201908212
Esxi
Version 6.7 670-201908213
Esxi
Version 6.7 670-201908214
Esxi
Version 6.7 670-201908215
Esxi
Version 6.7 670-201908216
Esxi
Version 6.7 670-201908217
Esxi
Version 6.7 670-201908218
Esxi
Version 6.7 670-201908219
Esxi
Version 6.7 670-201908220
Esxi
Version 6.7 670-201908221
Esxi
Version 6.7 670-201911001
Esxi
Version 6.7 670-201912001
Esxi
Version 6.7 670-201912101
Esxi
Version 6.7 670-201912102
Esxi
Version 6.7 670-201912401
Esxi
Version 6.7 670-201912402
Esxi
Version 6.7 670-201912403
Esxi
Version 6.7 670-201912404
Esxi
Version 6.7 670-201912405
Esxi
Version 6.7 670-202004001
Esxi
Version 6.7 670-202004002
Esxi
Version 6.7 670-202004301
Esxi
Version 6.7 670-202004401
Esxi
Version 6.7 670-202004402
Esxi
Version 6.7 670-202004403
Esxi
Version 6.7 670-202004404
Esxi
Version 6.7 670-202004405
Esxi
Version 6.7 670-202004406
Esxi
Version 6.7 670-202004407
Esxi
Version 6.7 670-202004408
Esxi
Version 6.7 670-202006001
Esxi
Version 6.7 670-202008001
Esxi
Version 6.7 670-202010001
Esxi
Version 6.7 670-202011001
Esxi
Version 6.7 670-202011002
Esxi
Version 6.7 670-202102001
Esxi
Version 6.7 670-202103001
Esxi
Version 6.7 670-202111001
Configuration E
11 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Esxi
Version 7.0
Esxi
Version 7.0 beta
Esxi
Version 7.0 update_1
Esxi
Version 7.0 update_1a
Esxi
Version 7.0 update_1b
Esxi
Version 7.0 update_1c
Esxi
Version 7.0 update_1d
Esxi
Version 7.0 update_2
Esxi
Version 7.0 update_2a
Esxi
Version 7.0 update_2c
Esxi
Version 7.0 update_2d

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (6)

Source: security@vmware.com
Third Party AdvisoryVDB Entry
Source: security@vmware.com
Vendor Advisory
Source: security@vmware.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.