← Back

CVE-2024-22255

nvd nist
Published: Mar 5, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Exploitability: 2.5 / Impact: 4.0
Source: security@vmware.com (Secondary)

Description

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.  

Affected (37)

Vmware
4 products
Cloud Foundation
Esxi
Workstation
Fusion
Configuration A
36 vulnerable
Vulnerable SoftwareAffected Versions
Cloud Foundation
From 4.0 to 5.0
Vmware
Esxi
Version 7.0.0 b
Esxi
Version 7.0
Esxi
Version 7.0 update_1
Esxi
Version 7.0 update_1a
Esxi
Version 7.0 update_1b
Esxi
Version 7.0 update_1c
Esxi
Version 7.0 update_1d
Esxi
Version 7.0 update_1e
Esxi
Version 7.0 update_2
Esxi
Version 7.0 update_2a
Esxi
Version 7.0 update_2c
Esxi
Version 7.0 update_2d
Esxi
Version 7.0 update_2e
Esxi
Version 7.0 update_3
Esxi
Version 7.0 update_3c
Esxi
Version 7.0 update_3d
Esxi
Version 7.0 update_3e
Esxi
Version 7.0 update_3f
Esxi
Version 7.0 update_3g
Esxi
Version 7.0 update_3i
Esxi
Version 7.0 update_3j
Esxi
Version 7.0 update_3k
Esxi
Version 7.0 update_3l
Esxi
Version 7.0 update_3m
Esxi
Version 7.0 update_3n
Esxi
Version 7.0 update_3o
Esxi
Version 8.0
Esxi
Version 8.0 a
Esxi
Version 8.0 b
Esxi
Version 8.0 c
Esxi
Version 8.0 update_1
Esxi
Version 8.0 update_1a
Esxi
Version 8.0 update_1c
Esxi
Version 8.0 update_2
Workstation
From 17.0.0 to 17.5.1
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fusion
From 13.0.0 to 13.5.1
Running on/withPlatform Versions
Apple
Macos
All versions

Related CWEs

CWE-770
Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

Source: security@vmware.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.