Description
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | VMware vCenter Server | 8.0 – < 8.0 U2d, 8.0 – < 8.0 U1e, 7.0 – < 7.0 U3r | 8.0 U2d |
| — | VMware Cloud Foundation | 5.x, 4.x | — |
Advisories 2
- WID-SEC-2024-1395 VMware vCenter Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 25, 2026
- NCSC-2024-0262 Kwetsbaarheden verholpen in VMware vCenter NCSC-NL (Netherlands) · Jun 18, 2024