Vulnerabilities

TI-2023-07312 CVE-2023-20896 · GHSA-fm8c-6m3x-v3rf

Out-of-bounds read in VMware vCenter Server

HIGH 66

The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00901 Published 2023-06-22 Fixed in 8.0 U1b, 7.0 u3m +1 CWE-125

TI-2023-07311 CVE-2023-20895 · GHSA-88h4-vqxf-pwjm

HIGH 76

The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01375 Published 2023-06-22 Fixed in 8.0 U1b, 7.0 u3m +1 CWE-787

TI-2023-07310 CVE-2023-20894 · GHSA-8x4h-jr9x-82rr

HIGH 76

The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.33945 Published 2023-06-22 Fixed in 8.0 U1b, 7.0 u3m +1 CWE-787

TI-2023-07309 CVE-2023-20893 · GHSA-r9q7-6mw7-hmpc

HIGH 76

The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01248 Published 2023-06-22 Fixed in 8.0 U1b, 7.0 u3m +1 CWE-416

TI-2023-07308 CVE-2023-20892 · GHSA-vmcx-3r5m-96cr

HIGH 76

The vCenter Server contains a heap overflow vulnerability due to the usage of uninitialized memory in the implementation of the DCERPC protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01849 Published 2023-06-22 Fixed in 8.0 U1b, 7.0 u3m +1 CWE-787