← Back

CVE-2022-31681

nvd nist
Published: Oct 7, 2022Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Exploitability: 2.0 / Impact: 4.0
Source: NVD

Description

VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process only, may create a denial of service condition on the host.

Affected (21)

Vmware
2 products
Cloud Foundation
Esxi
Configuration A
21 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Cloud Foundation
From 4.2 to 4.3.1.1
Cloud Foundation
Version 4.4.1.1
Cloud Foundation
Version 4.4.1
Cloud Foundation
Version 4.4
Vmware
Esxi
Before 7.0
Esxi
Version 7.0
Esxi
Version 7.0 beta
Esxi
Version 7.0 update_1
Esxi
Version 7.0 update_1a
Esxi
Version 7.0 update_1b
Esxi
Version 7.0 update_1c
Esxi
Version 7.0 update_1d
Esxi
Version 7.0 update_1e
Esxi
Version 7.0 update_2
Esxi
Version 7.0 update_2a
Esxi
Version 7.0 update_2c
Esxi
Version 7.0 update_2d
Esxi
Version 7.0 update_2e
Esxi
Version 7.0 update_3c
Esxi
Version 7.0 update_3d
Esxi
Version 7.0 update_3e

Related CWEs

CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

Source: security@vmware.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.