Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-31698 EUVD-2022-53118GHSA-9qpg-6x42-3rc4

The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port…

Published Dec 13, 2022 · Updated Apr 22, 2025 · Assigned by vmware

Description

The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.

Affected products

VendorProductAffectedFixed
— VMware vCenter Server, VMware Cloud Foundation VMware (7.0 prior to 7.0 U3i, 6.7 prior to 6.7.0 U3s, 6.5 prior to 6.5 U3u), VMware Cloud Foundation (4.x, 3.x) —

References