Skip to content
OpenAdvisories
Medium · 6.8 CVE-2024-37086 EUVD-2024-36417GHSA-rf2p-c3v5-v8fm

VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a virtual machine with …

Published Jun 25, 2024 · Updated Nov 12, 2024 · Assigned by vmware

Description

VMware ESXi contains an out-of-bounds read vulnerability. A
malicious actor with local administrative privileges on a virtual
machine with an existing snapshot may trigger an out-of-bounds read
leading to a denial-of-service condition of the host.

Affected products

VendorProductAffectedFixed
— ESXi 8.0 – < ESXi80U3-24022510, 7.0 – < ESXi70U3sq-23794019 ESXi80U3-24022510
— VMware Cloud Foundation 5.x, 4.x —

Advisories 2

References