PT-2012-3323 · Vmware · Vmware Esxi

Published 2012-05-04 · Updated 2017-12-13 · CVE-2012-1517

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 4.1 VMware ESX versions 4.1

Description The issue is related to the VMX process in VMware ESXi and ESX, which does not properly handle RPC commands. This can be exploited by guest OS users to cause a denial of service, resulting in memory overwrite and process crash, or possibly execute arbitrary code on the host OS. The exploitation involves vectors related to function pointers.

Recommendations For VMware ESXi version 4.1, update to a newer version that contains a fix for this issue. For VMware ESX version 4.1, update to a newer version that contains a fix for this issue.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-1517

Affected Products

Vmware Esxi

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2012-1517 · Security Note
• http://vmware.com/security/advisories/VMSA-2012-0009.html · Vendor Advisory
• http://securitytracker.com/id?1027018 · Note
• http://securityfocus.com/bid/53369 · Note
• http://osvdb.org/81692 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17231 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1517 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75374 · Note