PT-2012-3322 · Vmware · Vmware Esxi

Publicado 2012-05-04 · Atualizado 2019-09-27 · CVE-2012-1516

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 3.5 through 4.1 VMware ESX versions 3.5 through 4.1

Description The issue is related to the VMX process in VMware products, which does not properly handle RPC commands. This can be exploited by guest OS users to cause a denial of service, resulting in memory overwrite and process crash, or possibly execute arbitrary code on the host OS. The exploitation involves vectors related to data pointers.

Recommendations For VMware ESXi versions 3.5 through 4.1, update to a version that properly handles RPC commands to prevent exploitation. For VMware ESX versions 3.5 through 4.1, update to a version that properly handles RPC commands to prevent exploitation.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-1516

Produtos afetados

Vmware Esxi

Referências · 7

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16810 · Nota
• http://securitytracker.com/id?1027018 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75373 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1516 · Nota de Segurança
• http://securityfocus.com/bid/53369 · Nota
• http://vmware.com/security/advisories/VMSA-2012-0009.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1516 · Nota