CVE-2024-38812
Heap-overflow vulnerability
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Heap-overflow vulnerability
| Assigner | vmware |
| Reserved | 2024-06-19 |
| Published | 2024-09-17 |
| Updated | 2024-11-20 |
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
