← Back

CVE-2024-37079

nvd nist
Published: Jun 18, 2024Modified: Jan 26, 2026CISA KEV

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

Affected (44)

Vmware
2 products
Cloud Foundation
Vcenter Server
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Cloud Foundation
From 4.0 to 5.2
Configuration B
13 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Vcenter Server
Version 8.0
Vcenter Server
Version 8.0 a
Vcenter Server
Version 8.0 b
Vcenter Server
Version 8.0 c
Vcenter Server
Version 8.0 update1
Vcenter Server
Version 8.0 update1a
Vcenter Server
Version 8.0 update1b
Vcenter Server
Version 8.0 update1c
Vcenter Server
Version 8.0 update1d
Vcenter Server
Version 8.0 update2
Vcenter Server
Version 8.0 update2a
Vcenter Server
Version 8.0 update2b
Vcenter Server
Version 8.0 update2c
Configuration C
30 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Vcenter Server
Version 7.0
Vcenter Server
Version 7.0 a
Vcenter Server
Version 7.0 b
Vcenter Server
Version 7.0 c
Vcenter Server
Version 7.0 d
Vcenter Server
Version 7.0 update1
Vcenter Server
Version 7.0 update1a
Vcenter Server
Version 7.0 update1c
Vcenter Server
Version 7.0 update1d
Vcenter Server
Version 7.0 update2
Vcenter Server
Version 7.0 update2a
Vcenter Server
Version 7.0 update2b
Vcenter Server
Version 7.0 update2c
Vcenter Server
Version 7.0 update2d
Vcenter Server
Version 7.0 update3
Vcenter Server
Version 7.0 update3a
Vcenter Server
Version 7.0 update3c
Vcenter Server
Version 7.0 update3d
Vcenter Server
Version 7.0 update3e
Vcenter Server
Version 7.0 update3f
Vcenter Server
Version 7.0 update3g
Vcenter Server
Version 7.0 update3h
Vcenter Server
Version 7.0 update3i
Vcenter Server
Version 7.0 update3j
Vcenter Server
Version 7.0 update3k
Vcenter Server
Version 7.0 update3l
Vcenter Server
Version 7.0 update3m
Vcenter Server
Version 7.0 update3n
Vcenter Server
Version 7.0 update3o
Vcenter Server
Version 7.0 update3p

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (3)

Source: security@vmware.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.