Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vmcx-3r5m-96cr

Опубликовано: 22 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

The vCenter Server contains a heap overflow vulnerability due to the usage of uninitialized memory in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may exploit heap-overflow vulnerability to execute arbitrary code on the underlying operating system that hosts vCenter Server.

The vCenter Server contains a heap overflow vulnerability due to the usage of uninitialized memory in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may exploit heap-overflow vulnerability to execute arbitrary code on the underlying operating system that hosts vCenter Server.

EPSS

Процентиль: 85%
0.02678
Низкий

8.1 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.1
nvd
больше 2 лет назад

The vCenter Server contains a heap overflow vulnerability due to the usage of uninitialized memory in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may exploit heap-overflow vulnerability to execute arbitrary code on the underlying operating system that hosts vCenter Server.

CVSS3: 8.1
fstec
больше 2 лет назад

Уязвимость реализации протокола DCERPC программного обеспечения управления виртуальной инфраструктурой VMware vCenter Server, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 85%
0.02678
Низкий

8.1 High

CVSS3

Дефекты

CWE-787