Description
The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a virtual machine in conjunction with other issues.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | VMware ESXi | 8.0 – < ESXi80U2sb-23305545, 7.0 – < ESXi70U3sq-23794019 | ESXi80U2sb-23305545 |
| — | VMware Workstation | 17.x – < 17.5.1 | 17.5.1 |
| — | VMware Fusion | 13.x – < 13.5.1 | 13.5.1 |
| — | VMware Cloud Foundation (ESXi) | 5.x – < 5.1.1, 4.x | 5.1.1 |
Advisories 1
- WID-SEC-2024-1206 VMware Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 21, 2024